-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 19 May 2026 18:28:20 -0400
Source: chromium
Architecture: source
Version: 148.0.7778.178-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
 chromium (148.0.7778.178-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-9111: Use after free in WebRTC. Reported by Google.
     - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google.
     - CVE-2026-9112: Use after free in GPU.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-9113: Out of bounds read in GPU.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-9114: Use after free in QUIC. Reported by Google.
     - CVE-2026-9115: Insufficient policy enforcement in Service Worker.
       Reported by Google.
     - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker.
       Reported by Google.
     - CVE-2026-9117: Type Confusion in GFX. Reported by Google.
     - CVE-2026-9118: Use after free in XR. Reported by Google.
     - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google.
     - CVE-2026-9120: Use after free in WebRTC. Reported by Google.
     - CVE-2026-9126: Use after free in DOM. Reported by Google.
     - CVE-2026-9121: Out of bounds read in GPU.
       Reported by David Korczynski (Adalogics) .
     - CVE-2026-9122: Out of bounds read in GPU.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google.
     - CVE-2026-9124: Insufficient validation of untrusted input in Input.
       Reported by Google.
Checksums-Sha1:
 d66e401a70885619411e770e5c22f8f7bbbf8ce2 4099 chromium_148.0.7778.178-1~deb13u1.dsc
 5afc9926484713b48274eeb9f00da3aa078df6ec 900766244 chromium_148.0.7778.178.orig.tar.xz
 8f200f620dd605558e0cb68c10a0b6060a910266 487292 chromium_148.0.7778.178-1~deb13u1.debian.tar.xz
 2d1f3eed8d3fd3e20d18fc640630e810d313a92a 26933 chromium_148.0.7778.178-1~deb13u1_source.buildinfo
Checksums-Sha256:
 1865d6819225a9c620a37a5c82a56717a8d5afd408c6bee1e3ad1806a0cf82d8 4099 chromium_148.0.7778.178-1~deb13u1.dsc
 adbe4403a5f8ef514a2521880580504a2d4ee56557d4e8bfd1c67d729f3d0c6c 900766244 chromium_148.0.7778.178.orig.tar.xz
 ce0f40cf97e8d35255ab74827404fd52445cb9dbb5647f4ac3dc5091afe1ec8a 487292 chromium_148.0.7778.178-1~deb13u1.debian.tar.xz
 e0d741c216f08ab7dda35ed210410417dae7ab4a208b5aa9eeeb903ea93579da 26933 chromium_148.0.7778.178-1~deb13u1_source.buildinfo
Files:
 91de4823189583e17633c761ee5eb4db 4099 web optional chromium_148.0.7778.178-1~deb13u1.dsc
 2243a128d1497cb61fd10dd6830b8a4f 900766244 web optional chromium_148.0.7778.178.orig.tar.xz
 3dafc7e6018190b327af6d55804b4895 487292 web optional chromium_148.0.7778.178-1~deb13u1.debian.tar.xz
 9a7e83d89f424b22d8b695ccc9fe8aad 26933 web optional chromium_148.0.7778.178-1~deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmoOGbkUHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8NudjfcHQ/+L3Pq2Lu8cCmW+6K8KYkU/xpIAKZy
FiZdHogNR/V8+k1deyk+bGj4zxk3vR4zFj9sTNU3RJFnWBPIaYZx/qzil0fgR3Gr
IeY5CS0o5ZpvHd9rzyXBG0a6+7ftZFRn1kPRbwV6+nmW9GeYUY/Wjxm+077qUJFX
z+LD3YLS4qWptHBnu3lEIPjG0qoAAObbKrHnIEoVKe+IYIBJJVsUWVCkgHmJ17Hr
qUCzDNM2euROHPMJyPnMzB1Q2TfHvF75WtI3eqgQGq3CEVpqMeTkvIS6EVwYJFLZ
SZ9DXRA2YhL0eKLNgrvy/Sml16F0V3eBSq9JOUjfiz8fZOUJl7fTYQv/QRR5bl4h
Tw275NXHdCGI3vD4/80rzPaRrhrLQ/VWraiUT1+ndcuqxrfHJ+9PQza+GClxpa/C
6hG2iXoZjXW90oCs4Fi9m5SQVUyX3mLrU1WoA+X8YC0akFmybP1DX9SFg70XzOn3
/busu/p/t/dO06IuO7f/VBbTQs9iXyTgUbsvD5pZaJRL+FvCgHMQleFTyXVLjcZt
EysssrsTPXMhxMfJerPmeNLOmiuBlaOpG6lYN3iwhTYQ+QyRZQ1F5F9yPqeuVTb7
vnGDZM8iKO8SkG7rQH840QBpAbKKzW+CKWbI/zvTPno+uz9wqs3rifIOT93RsQ60
YFsyiPWeBACnVRI=
=mExl
-----END PGP SIGNATURE-----