-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 149.0.7827.196-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: ece168182a3dfd9e14af8a67337f97c3b8ebd300 6152012 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb e337bf346620b9a567a334447bbdef48c209e8d7 30800608 chromium-common_149.0.7827.196-1~deb13u1_arm64.deb f6f20a8d57b954f30a951c63b1108bad7d0a0193 34829348 chromium-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 5d1257d67fc8f36e874b1e31e481da83aa8a5d5d 6809600 chromium-driver_149.0.7827.196-1~deb13u1_arm64.deb 59214b130520c12a787481dd02d57f83a3259614 29031520 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb f67b96b92dba5092919150ffed4bbea528a9f3c6 55477840 chromium-headless-shell_149.0.7827.196-1~deb13u1_arm64.deb 1632854cb54313ad03855e4065ae7980207709ed 21092 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 27f0797606f1f66e278e4cc4d933f619367ee487 126872 chromium-sandbox_149.0.7827.196-1~deb13u1_arm64.deb 4d3aea0bc8875a99a7840b69670b9efdedfb4356 30514072 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb c20ed0b270aa024640231a65fb43f4aae5f4f71d 55278124 chromium-shell_149.0.7827.196-1~deb13u1_arm64.deb 58d0fc55689df94586d37e095c4daa07deea7e2d 30662 chromium_149.0.7827.196-1~deb13u1_arm64-buildd.buildinfo 0a6923b2ba8a50de74ed744a8680db505a22d0dc 73995448 chromium_149.0.7827.196-1~deb13u1_arm64.deb Checksums-Sha256: 44cc1f808852fa9d1640494ea292e0bc1d42f978fc1dc967ebbaf6234665c1fa 6152012 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 90d12c09e5f451ef7c3dba023cac8b097ddb3407c0074579edb261540d5fcf97 30800608 chromium-common_149.0.7827.196-1~deb13u1_arm64.deb 161240708bcedca0d7969205fe6157075fe04c9e67ff94d5cd7bde6e32e94ace 34829348 chromium-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 1e118354e9c067ace71c9f8ebcc8aff9069667b1119bec90939afcc168d6e7a0 6809600 chromium-driver_149.0.7827.196-1~deb13u1_arm64.deb 103c9560a9acea1e63861bc99ebe6cd0899001eb413736036ee846c8e34e52cf 29031520 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 771d920de0f477fa5dfb1d545099cdf28c4216018e0b8e80798e038b57c95b0f 55477840 chromium-headless-shell_149.0.7827.196-1~deb13u1_arm64.deb 68c739a6f8f7a43f435676cbad9f70780b7665a5e8f13e1f4c403016ef4fb155 21092 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb cbaf87dd1dd3f2ccb47b0d4a740a58ea45f1bfd9c6fcbf792a9c321b7ef572b8 126872 chromium-sandbox_149.0.7827.196-1~deb13u1_arm64.deb 30269b2e34aecc497576257cddbcb9002f0173363d6316278f460e66d3265527 30514072 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb cb772bdf98ea45a44088023a41d40fe56c5b16c22f511e7b0f204d19587af9f2 55278124 chromium-shell_149.0.7827.196-1~deb13u1_arm64.deb 8c540cac6467e07e7530470b2f4f075ef248d5a9b4191b213d4f6ff745f2891d 30662 chromium_149.0.7827.196-1~deb13u1_arm64-buildd.buildinfo 1dd53fa1c93f32471b619ea415a12cad8cfb045fe74bd82d93c53e2cf8449523 73995448 chromium_149.0.7827.196-1~deb13u1_arm64.deb Files: 03b98efd413a9cfddcfa6bdc76ad2345 6152012 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 48b80157698091eb62b376bfbf684660 30800608 web optional chromium-common_149.0.7827.196-1~deb13u1_arm64.deb eb048f464465178b106d59960546ab62 34829348 debug optional chromium-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 80c370d255d14a14877369ca5e2cb280 6809600 web optional chromium-driver_149.0.7827.196-1~deb13u1_arm64.deb e8ba2c6f096a200ba4f1d5c792a5af90 29031520 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb fea2bf00a2b94d50b341348bbef9ebed 55477840 web optional chromium-headless-shell_149.0.7827.196-1~deb13u1_arm64.deb e53703601402f60c077114606116e591 21092 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 09d73f3bbf4011c2ef5c164d2305cff5 126872 web optional chromium-sandbox_149.0.7827.196-1~deb13u1_arm64.deb 7dd778976bb20183002431234e0b13ec 30514072 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_arm64.deb 55f55eb9f090cdfe163c36087c906d94 55278124 web optional chromium-shell_149.0.7827.196-1~deb13u1_arm64.deb 96993e8f1a862f01d7df1e38f15a362f 30662 web optional chromium_149.0.7827.196-1~deb13u1_arm64-buildd.buildinfo 75d7ff86537bfc19eaaa56997c88bfab 73995448 web optional chromium_149.0.7827.196-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmo9U/EACgkQvzDqKQSG l8WWwRAAqEVkSIYOo8E1t+GBILuStiZJ6ki6nr5dDi8vY5l/bhRwlLHrUzJWIcJd ZQp58t3dMWGDqkbAO0RNoH1Mq5EiroADf1IY4eGfVGoP9uo+ze/GczIUXbaRHl1L 4Vu7hha3IiArd8GcCk9ODeIQx1lqj62hFVjoo4lZI9vg5e2FDBZCJ2sszQRly0Wd NZ2tq5VfMeL5WyAGfZSsQ7W+LAnUA2m2o1wUb6iNla+DzallvuVmJQXYdV723oR/ FtlQ/KyM5MgRYJ3/2SOQMejczHNG3Dqsi99G4ckg2Ya6EdnJss2Ge+SaSuqmFlcl P3qQ81ABF+iR/EKATrr+v0p6aingREyKZNXzCl/N6lUXJngdOsAh7zFF0ouNLm7C obRfPxLNOic7LCIHWvEfyHLnE+QWBi7yG7KiPqxO0gOSdHJG5jMBrEgYOckAShJY LMJYYkhQmiN2i7XyzHCOhPV7PZqQCF7v6Ab9KCNkLPVIrsXas0U5NwjXwqKWOzxh ESngnyDQZsqhBqr1GfbUlyt0jMFv99FvAKTkUux1AbVpU+b7nYd2MJDTz2O2DaNj xFz7UJRpWE1QQku9mY/uKNfEkdahbxVLhVxTL1mE10pZftRX4rjQ3hNCEJxk/iyE vGw5iDPfKmUU7w3RQ/CiHFw5uHDAUdyk+JbhaS46uxWroi5OU/s= =k5Lq -----END PGP SIGNATURE-----