-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 01:14:44 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 149.0.7827.155-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.155-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12437: Use after free in WebShare. Reported by Google. - CVE-2026-12438: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12439: Use after free in Digital Credentials. Reported by Google. - CVE-2026-12440: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12441: Use after free in File Input. Reported by Google. - CVE-2026-12442: Use after free in Passwords. Reported by Google. - CVE-2026-12443: Use after free in Web Authentication. Reported by Google - CVE-2026-12444: Out of bounds read in Chromoting. Reported by Google. - CVE-2026-12445: Use after free in Extensions. Reported by Google. - CVE-2026-12446: Insufficient data validation in Passwords. Reported by Google. - CVE-2026-12447: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12448: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12449: Use after free in Chromoting. Reported by Google. - CVE-2026-12450: Inappropriate implementation in Media. Reported by Zhixin Tu. - CVE-2026-12451: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12452: Use after free in Downloads. Reported by Google. - CVE-2026-12453: Insufficient validation of untrusted input in Input. Reported by Google. - CVE-2026-12454: Race in Safe Browsing. Reported by Google. - CVE-2026-12455: Use after free in Tab Strip. Reported by Google. - CVE-2026-12456: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-12457: Insufficient data validation in Extensions. Reported by Google. - CVE-2026-12458: Incorrect security UI in Passwords. Reported by Google. - CVE-2026-12459: Inappropriate implementation in Serial. Reported by Google. - CVE-2026-12460: Insufficient policy enforcement in File System Access. Reported by Google. - CVE-2026-12461: Out of bounds read in WebRTC. Reported by Google. - CVE-2026-12462: Use after free in Media. Reported by Google. - CVE-2026-12463: Inappropriate implementation in Views. Reported by Google. - CVE-2026-12464: Use after free in Browser. Reported by Google. - CVE-2026-12465: Insufficient validation of untrusted input in Metrics. Reported by Google. - CVE-2026-12466: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12467: Use after free in Extensions. Reported by Google. - CVE-2026-12468: Inappropriate implementation in Updater. Reported by Google. - CVE-2026-12469: Uninitialized Use in GPU. Reported by Google. Checksums-Sha1: b28477a525d97a6959028b5c3e0f5fece7c9b3fb 5779488 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 5fe0a364d1cb34f67dc12d0f06623949c14be821 26014464 chromium-common_149.0.7827.155-1~deb13u1_armhf.deb cce389cfa0a7e1fb87c11c171619f62157ec5aab 35515316 chromium-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 551d7721402467659bd325e42abdde75f5d32045 7380104 chromium-driver_149.0.7827.155-1~deb13u1_armhf.deb a34546611e8e7253af5ad407d99cce2695dd2698 27570176 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb be687aa71a9cf8564e0c750c10294c79b48a79a2 54959836 chromium-headless-shell_149.0.7827.155-1~deb13u1_armhf.deb 74cabe53aa68e523656b483042bd53f629880dd3 19264 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 1fe7e8f24218518b712d2e21b2d10daa74f60e17 125676 chromium-sandbox_149.0.7827.155-1~deb13u1_armhf.deb 1b35ee4ef4aa157c23f49c30529710621ead25a5 30052484 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb baafa06f77d7403713f162ee5d576c52dd6b9a90 60370240 chromium-shell_149.0.7827.155-1~deb13u1_armhf.deb 8efac729a4e999cc64d69571d8d6fb2701d392f8 30555 chromium_149.0.7827.155-1~deb13u1_armhf-buildd.buildinfo 5af055df925e2da1ae6caf44d5cb2091a51469ac 71956580 chromium_149.0.7827.155-1~deb13u1_armhf.deb Checksums-Sha256: cc542d772b66acb3dd908a81b784ed86b8529cd66ad243e32cdbcb2a2cf99dc5 5779488 chromium-common-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb b7848d95543be53845be004aee2f2cefac47bb40b96061f8131bec4c51187f25 26014464 chromium-common_149.0.7827.155-1~deb13u1_armhf.deb e47bfc7dd646491061fb5f60a2f19ad4e71e727c9473e920129ddbdc329b248d 35515316 chromium-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 0b0bba66c04ec11b72741fed222d4e9b62b6db8b325ee89c30185cc32828ea1b 7380104 chromium-driver_149.0.7827.155-1~deb13u1_armhf.deb 2352fe5c8e4543ed01267b905101ce2af5c16acc8223ee953feeedd43138be80 27570176 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb cbdd71744b8a8f869d27acad6bcc1daaf98df26df6910b77d0210d70c300d5fe 54959836 chromium-headless-shell_149.0.7827.155-1~deb13u1_armhf.deb d3060c46913437635c5de97046fa9a340f3a675977c02cfc4c3bb588c6c4e3b9 19264 chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb e46cf085a309cf3d91acfc4e09ec328865ebe2eeabbf59b2a74d0289bf8e9aeb 125676 chromium-sandbox_149.0.7827.155-1~deb13u1_armhf.deb de711ae8950db96ab58851868bec7f56c3389d27219f233f325e15a77da53ca4 30052484 chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 86ab10f83b91f240e4636ae0f223c0c6680139055c78639919bcdc5bba6e8b26 60370240 chromium-shell_149.0.7827.155-1~deb13u1_armhf.deb ea085b4ad274bdede9e5d872e8a25e5b973421c29ee5de16c6d90fac336ee545 30555 chromium_149.0.7827.155-1~deb13u1_armhf-buildd.buildinfo e3ea240b56af52d676a6430f109807b5be0e2210bcb6b2016825df133730c9ee 71956580 chromium_149.0.7827.155-1~deb13u1_armhf.deb Files: bada9ead8191a174d52a1ba038ab0358 5779488 debug optional chromium-common-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 9d34ea1d5ee50aadfed544bb0f7ac5b8 26014464 web optional chromium-common_149.0.7827.155-1~deb13u1_armhf.deb d8dd939983e2aaeaca9961c85631d6d6 35515316 debug optional chromium-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 913675a21fd9d8b70d540088e47c121c 7380104 web optional chromium-driver_149.0.7827.155-1~deb13u1_armhf.deb 2393435ea43edde239f6d4070c03e28b 27570176 debug optional chromium-headless-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 079fc3108f01f5e467786a79badefc1c 54959836 web optional chromium-headless-shell_149.0.7827.155-1~deb13u1_armhf.deb 0c030287ac127910d1fdd8d0f58171a7 19264 debug optional chromium-sandbox-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 9040a23d6fe127d5c3d4ad194fd9b0a4 125676 web optional chromium-sandbox_149.0.7827.155-1~deb13u1_armhf.deb 42cdf464fee72981eeb68d8788acab89 30052484 debug optional chromium-shell-dbgsym_149.0.7827.155-1~deb13u1_armhf.deb 7e076662a5e0be95b9a9306d0a3bd8f8 60370240 web optional chromium-shell_149.0.7827.155-1~deb13u1_armhf.deb 060dddd99cdc0e5e734bb4cd57990382 30555 web optional chromium_149.0.7827.155-1~deb13u1_armhf-buildd.buildinfo 90ae7ab6c3118fe560719751afb91c3a 71956580 web optional chromium_149.0.7827.155-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmo0Qe4ACgkQ8U6eOZMp j6+PAA//fLJYEMVdFXE1vENhUND2iYvUymRigv5NkhXx1ULLLpIPavA6qaNS36qI UD+OzUpAz6Jqiir3kVfQxSsEtUAF7HVB/2aazIf4S0eNcnqFIxpY6HD7orlfL+bY SIt2/9ZQDO87I62ixdj8dXissbY24+j9fIXEbdejCnoXWGXCfwJfZrhdhiPlv7tp /zmbmGPQg0njqJ0opHZmI4gociW0fUKhmhNXqQonMypW5D/+gu5QThFg3s9wwUl1 Sf5+8bOqFk1xZ1oiC7WPLZ5bvxVWS+AQOvwJj3MI2Bw+Y3w4jK6drdYaag8t65ug lZ8sLa2b5UcbBs/6j/i2rRAbV1xcdmuFFGugNZkO/wmDw/y02IpHHvU00z52FLTk kgVv/Quaq7ISs4+pU2bDwQACL7oKgz7h+byPeOJG6Q0j+rWHudqzMfM7FX4PIPLS YJOVHY9Ff0nLNMGwm0GeQdTilOCiapR19otJ5WRvW+qYqSSf+/VHYrxB5WUxTPCy /4Z3IbEPsdekOxweAsHPlVIHqGfUVGwixHWzqYtoRJbdl3nkGCgGSppmzod49ymo fe/qar5e2bOgzT8JJRkS0Wb3HCVHPxQBIEA/FCs6EVCd4mQoxQ+5Oh4j8akjiaqR rnMpfttj7yEELxTS/6PCjbttPKTKBK496uX8LQw9WWpcyWzJhw0= =qykQ -----END PGP SIGNATURE-----