-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 149.0.7827.196-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: e1b03a4f3f6f4bb00eade5dda6a83df339e64d2f 5202776 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb baabe01daaf628d599e14cf331d8b7cd1453e384 26284548 chromium-common_149.0.7827.196-1~deb13u1_amd64.deb 1868c2f6edc30b2b665751f1270b18b5112b98a5 33305664 chromium-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb c1db873fb82b0925cc54bc63a0755b635af8cf4d 7674180 chromium-driver_149.0.7827.196-1~deb13u1_amd64.deb 6801df3cf62df305a8d82304a0c623dc827cdc39 28192652 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 097825c61ee7648eb5cd99fc1f55d8098d153c23 63473956 chromium-headless-shell_149.0.7827.196-1~deb13u1_amd64.deb 4fa46353e0ac4715ac376ec7cd2f3382c6afbc88 20212 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 52dbf5c3edb4e7e4e2ea6e10b655f738fb962617 126068 chromium-sandbox_149.0.7827.196-1~deb13u1_amd64.deb 98c7952e9bc337e933b964897dec50be8a99032c 29818992 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 8249020bc3f43374f40741c2740d5884b1ee9734 63084340 chromium-shell_149.0.7827.196-1~deb13u1_amd64.deb 6d586459dc00ad0ec71b5cc3c22b3149a6a80034 30696 chromium_149.0.7827.196-1~deb13u1_amd64-buildd.buildinfo 122a1721a282240e07dcc9f8f769d0a40361b789 85809400 chromium_149.0.7827.196-1~deb13u1_amd64.deb Checksums-Sha256: daa6f3528333bced03fd0eab1398a0613975cc5bb1fdd9ec8259a70538bf4c08 5202776 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 33f38275f9c043e3ce8d87d168281e7512b1be64320c5dcdcfe3f42196995688 26284548 chromium-common_149.0.7827.196-1~deb13u1_amd64.deb 1b96146573dee0603cbcd1f9c22606577529725ff3d091bdc26fa0bff80c9359 33305664 chromium-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 2fe438cddd7d403bd9c968406bc8df55f68732bc2b461ac8ae34c4b10ceb9c62 7674180 chromium-driver_149.0.7827.196-1~deb13u1_amd64.deb 21836da22c8cef99faa0d65e6b7dc2651092a4d61b98a7769e466d5704cd7e83 28192652 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb bdc5a965bab5dddc7c95d5a4b73ccec6eb1c77e0e6564231d060db0d967e65a6 63473956 chromium-headless-shell_149.0.7827.196-1~deb13u1_amd64.deb f0f1be17cd0399741f0b7e984600d524e0fda37b6003d232a2dacfd58900b031 20212 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb ca8c81a4bf69250a3733f20de91713789b61c253a9c9bfd1c0c4d6c3e3305dbb 126068 chromium-sandbox_149.0.7827.196-1~deb13u1_amd64.deb d6ee24f6092b894483600e28c6a4f06a5436595092d0975e1e293c73fb3bb64f 29818992 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 2ca8c65c76daa8f63eeb95abb7e21891373ee38979d76d490ab2977d0a7212fa 63084340 chromium-shell_149.0.7827.196-1~deb13u1_amd64.deb 14c3a8efdec6bbe8491321297a22bb8702b66212d0a5e360dfe77244c9af35a7 30696 chromium_149.0.7827.196-1~deb13u1_amd64-buildd.buildinfo 7776cd0b5d8e7383b8654cf5dc45b26a6a4c8a88cfccc3409e69b2675cec2bbe 85809400 chromium_149.0.7827.196-1~deb13u1_amd64.deb Files: 3544fc282eeb1a7401df44aad3e55fc2 5202776 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 9cba047a51c279fa46da181e5824dee0 26284548 web optional chromium-common_149.0.7827.196-1~deb13u1_amd64.deb c37d357e0cec0bab487f5b6b1c29a627 33305664 debug optional chromium-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb dd86312d590ecb651a588185a4f90d8a 7674180 web optional chromium-driver_149.0.7827.196-1~deb13u1_amd64.deb a12948cf564fc3f1a532ec5c33f40cd2 28192652 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 49ec607513274577896f01dec3ae1628 63473956 web optional chromium-headless-shell_149.0.7827.196-1~deb13u1_amd64.deb a31bfdb4be723bcffce3d75de64e071b 20212 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb 9e796677c3b4c797709d6e9669672bd0 126068 web optional chromium-sandbox_149.0.7827.196-1~deb13u1_amd64.deb e72ddb1acb5c91eefa30db8031b765f3 29818992 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_amd64.deb aa6bf18d6c6ac478adadbd27c5480f47 63084340 web optional chromium-shell_149.0.7827.196-1~deb13u1_amd64.deb e6f355b8e218772c08155a87e3bb4878 30696 web optional chromium_149.0.7827.196-1~deb13u1_amd64-buildd.buildinfo 65ab83a6cd035064c1efeea3b443e798 85809400 web optional chromium_149.0.7827.196-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmo9VMsACgkQN8Ugyu9d QiQClw/6A4w1DF05Yj1ombrDCBL8hNGkd9C5NmKLm+Uw4ieaOgkpw9I61Dodci4Q Q7pRppjJmtdMI+st0d9Rwm/ZjkOlCu7uGcqXPrJ7iId9H/eo5TkNl1PucDulhVD4 UFGZcfACSCZtbXqgoq/AnWUhDSMl8zOdxjbzbje+t9ppZNBVqTf01NQbe76qhXyW epBQOI8crBbufSMU10cpwWYaiQNn7DU9ibfNfsbHXRYykxsswArfDI25zNqmsyDN MP4ZFsczQrnI0QZUc3TdPrQBlzftteZ7ObVHpylmEs7QCMI+a41p6p06BLSprLgA xpugnQoZ/YBbklWD2our4SjZlzUmm7h4Ix7zS0Q/rjo3fvDSl8ZK5EkKZHeRXJao A1mZAMVRF8I0320oNUhzpoHM4eNUn1jH1ddqNDiCZXeEvwCrmFSlQGA+FMJv18ux UBGVq7JUEXyjZEjeWLLBHARW0otAOIhQli/hXPaJVBEyH4ueEri1YvEhQ4No5UsO G3n7fC22XSHa36QNfsTRMU1tujDYjX047/hxi2MwY/e7yuthGixV3sZISA7EUMOP dEodnC5kw6ZtWnnjHZQrxjq5yhSrvjLkTAHbF7z/A7KD4Q+tN5aYVDndlOqyfSbd sSPMEpAfNIaUZNKmZUaRXHHszC59v6219ljvyTzEM+wr/aF8S8w= =WIOG -----END PGP SIGNATURE-----