-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jul 2026 23:21:54 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 150.0.7871.181-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (150.0.7871.181-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-15899: Use after free in CameraCapture. Reported by Google. - CVE-2026-15900: Use after free in GPU. Reported by Google. - CVE-2026-15901: Use after free in Network. Reported by Google. - CVE-2026-15902: Use after free in Cast. Reported by Google. - CVE-2026-15903: Out of bounds read and write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-15904: Use after free in Ozone. Reported by Google. - CVE-2026-15905: Use after free in Aura. Reported by Google. - CVE-2026-16420: Type Confusion in WebAudio. Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt. - CVE-2026-16421: Inappropriate implementation in WebAudio. Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt. - CVE-2026-16413: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-16414: Insufficient validation of untrusted input in Chromecast. Reported by Google. - CVE-2026-16415: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-16416: Integer overflow in Chromecast. Reported by Google. - CVE-2026-16417: Uninitialized Use in Skia. Reported by Google. - CVE-2026-16418: Stack buffer overflow in V8. Reported by Google. - CVE-2026-16419: Out of bounds read and write in ANGLE. Reported by Google. - CVE-2026-16422: Insufficient validation of untrusted input in Certificate. Reported by Google. - CVE-2026-16423: Use after free in UI. Reported by Google. - CVE-2026-16424: Use after free in GPU. Reported by Google. Checksums-Sha1: d65a769d4e89b2a93375c4e7acd8b6109495e95f 6154332 chromium-common-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 95811219f30d4202f85a34efdab98b45577e570b 31210528 chromium-common_150.0.7871.181-1~deb13u1_arm64.deb 8f6c7aa79d790373c8af1e059c2fb81b5a487756 35395268 chromium-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 858836a12a5c3d8c357b3e74c7c168043f9274ac 7043120 chromium-driver_150.0.7871.181-1~deb13u1_arm64.deb 19d77cf98d01b446e1fd937f4e34cabf7e20feab 29458148 chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 37269afb940979aa3968a35bb9c4ac4339efc391 56027784 chromium-headless-shell_150.0.7871.181-1~deb13u1_arm64.deb 026fbde1dbd8a7036ae2ba8e8adc41dc5195202f 21060 chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 5213ab9ca08cea6b9e0433abae0065f1d08ce8d9 132968 chromium-sandbox_150.0.7871.181-1~deb13u1_arm64.deb 4058db2538b1517c1702277d7d89614fca768997 31026724 chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 852dba6f6c92d844eff7d5bb659d5c7d1ac6eed8 56135592 chromium-shell_150.0.7871.181-1~deb13u1_arm64.deb 29c84df511735a352a63327814216c01de897b24 30919 chromium_150.0.7871.181-1~deb13u1_arm64-buildd.buildinfo 8625237183afbca9ebe42cb8f21e23d7f9bb38ba 75068004 chromium_150.0.7871.181-1~deb13u1_arm64.deb Checksums-Sha256: 2a649780110c5d6f603dc35d7a1e20c2e67dbe2bb0484dfac0ac9194ead64034 6154332 chromium-common-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 295771412ad06034a7b4ea2de24b5a49ab0642c1d12dd72f0855b8a1a06d7a4f 31210528 chromium-common_150.0.7871.181-1~deb13u1_arm64.deb 5803de78ce39036d8a9ae75f674d73d15cd9f390cf07c9e432688cc33015d078 35395268 chromium-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb bb786c81f24a4c6e40fe1b58e2dc7d433f063b04a71162c41d333ec3b0df6042 7043120 chromium-driver_150.0.7871.181-1~deb13u1_arm64.deb 96f2c43ecaae21b5ab8c10e2c468409c3f7c1ed53856b6c79dd924ee6f366fe8 29458148 chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb edfcc8c366fdec50c71daf8d4e95ef7df4fc6d548ae4b081a041f044ce32b92c 56027784 chromium-headless-shell_150.0.7871.181-1~deb13u1_arm64.deb e5688f241bd9f65b44c2c2fe405b5238926e966db95a7204d8269212756102f9 21060 chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 906b2354d05e0d73c73fd6410f8dfe7048ce1625f076e8956ea77f913f7d5316 132968 chromium-sandbox_150.0.7871.181-1~deb13u1_arm64.deb ae3e49fb0fc2b947da1098e3cada6cca71c97fe74305bbda65b89c0f24dcf0a3 31026724 chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 1f6e9f4d7ce621bf5f1605afa0adf130875ea29e349146d993d0c034cff2f018 56135592 chromium-shell_150.0.7871.181-1~deb13u1_arm64.deb 9e2dabe07c63abafc7796af0ee96f64f53bb09770f2216090a76cce5e7787a33 30919 chromium_150.0.7871.181-1~deb13u1_arm64-buildd.buildinfo 3d47f0d4d043a73d6ad410dcb4b5a5ac42a6217ea3ca2bd18f2d7ad2f2f0c867 75068004 chromium_150.0.7871.181-1~deb13u1_arm64.deb Files: 997552d1f443fc6f4eaa80c76890da87 6154332 debug optional chromium-common-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb ea38506af2f01c169a63563dcd3a7222 31210528 web optional chromium-common_150.0.7871.181-1~deb13u1_arm64.deb 81a9c080f7aba4e08f5b3c14a28180bd 35395268 debug optional chromium-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 64a9ad5799e771bbe028214f4900536b 7043120 web optional chromium-driver_150.0.7871.181-1~deb13u1_arm64.deb d743adf2e9da66ae7b228afb8bb820d5 29458148 debug optional chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb fe820a260719886209bf66907a3553eb 56027784 web optional chromium-headless-shell_150.0.7871.181-1~deb13u1_arm64.deb 1b69e42ae2425143494b22835694b49e 21060 debug optional chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 1f3728dbce6ef1ab1d11884bd88544d2 132968 web optional chromium-sandbox_150.0.7871.181-1~deb13u1_arm64.deb 1553b55be92e045ff03b2afa38cd3297 31026724 debug optional chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_arm64.deb 83715644436725d09cbb684f3e4b0884 56135592 web optional chromium-shell_150.0.7871.181-1~deb13u1_arm64.deb 1ab01cb6db81fe5af87203d911b80094 30919 web optional chromium_150.0.7871.181-1~deb13u1_arm64-buildd.buildinfo 1c18775a8b463896c468be1e80ae64c9 75068004 web optional chromium_150.0.7871.181-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmphaQUACgkQxqCFmsOW goaAvA/+NEujAZ1MBmFqfdy6DJdvnVe4i558i47aEFN8hb0DurTiqlD4l6Pd3CQr OuHhrqA5QmC+Etb54IbjTMyEPO/gteDJ1Vdffiwp6XB7NiEEP6gqLPnQmDl9dFKm kcyFAe8+uIuSimacKAslDAh2cV6zVT6nqT2yyMiJAH8zqWa15y5i1EqaE9avJRl9 R3LxFyB7GygsV37fhSfipSwgBziOjYl1n91IXIsNrDSqkQl0si1hMrMj5+TGOhCL f3zm60wIpmTmVKl1Nj/NSSRep2FpS4XfkuRFXVI+q2RdoC0jEEo0852uSU7/zzvT 4oVS7tv7cDP4uvlH7uoRbr72ltejw6lhprKOlCNoW/h9mOPopEkxFdUu9/ik0QAk 0MSBkk0jTkXW3/fMLMp8CSoB8tf5M/s98lk5DIzROlFcqu0ee7wF6BJ/bFweEI57 w7JVX6r6VCrbTSoXdAUCEm4iwUs21YMaKlRPiHM5kvQbbWYUAxmisGQEkcVN4H8Y j+IqtwsB9YYG1BiVAXUPwQO7zxvfNRWMJXdoYEFUVC6N0fQcHNCUwXMC4uFP94QV zBDO37iMSWxV7Q9RmaPIYiAeXZ8HihnR6pHDv9zpUJay7BRzGqB1x9F4c7BiGZVH 5jf6CpkZ3ml3IpjWxpNa3Ee20mdUpucAyOXmfmyBEzro4RbWbuo= =FQ5g -----END PGP SIGNATURE-----