-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 149.0.7827.196-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-05) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: 791904528e1ad7daac22e3d2b9512fd92ae92a79 6468168 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 117f067b4202829708beac06b294dba37430ee5d 30959536 chromium-common_149.0.7827.196-1~deb12u1_arm64.deb ae3b3ff0960e87a48103ba71616dab3716dcb0b8 37832764 chromium-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 7e7bd636f1b73de8f666035f5e6e0f73404c2e75 6922460 chromium-driver_149.0.7827.196-1~deb12u1_arm64.deb 7024d9e957b604225c336a7cfe455faf5abb48ae 30676088 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 18fff78fa63c5b1959ef378e0cbe8b1d02934bec 51560044 chromium-headless-shell_149.0.7827.196-1~deb12u1_arm64.deb 853a33c6347bff9a2aea1255b00b013b95f17c88 20244 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb b1a90ca0c4ac453c77a166ab25ac53727267d86b 128840 chromium-sandbox_149.0.7827.196-1~deb12u1_arm64.deb 52084e98558b50413511151e71b8edec60c58139 33136556 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb c19a568e41184730970563a20b85edba5324bae6 56484800 chromium-shell_149.0.7827.196-1~deb12u1_arm64.deb 2326437789488789c30ea9afd6eeb9fce8aa5ed6 30477 chromium_149.0.7827.196-1~deb12u1_arm64-buildd.buildinfo 4efecfdc1ee9bf336a00d54eef14edb758cc4707 65762012 chromium_149.0.7827.196-1~deb12u1_arm64.deb Checksums-Sha256: fb1b719b1bb80f89b61fb9bfdc44786cf8f61dfb6c11d93123c863d63f859232 6468168 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 44b5d882f0efa0a7570593074e324446a442da6af137f461d540878805255898 30959536 chromium-common_149.0.7827.196-1~deb12u1_arm64.deb 887a7f3d525a8d15d764183931484a9c9621f2877f69d238caf80773f676ae90 37832764 chromium-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb b416a82013058560909d839817ca2fd38850dfae8675f92136718da015f6c587 6922460 chromium-driver_149.0.7827.196-1~deb12u1_arm64.deb abda3c93a80fee4243369f659f55d7e790ff07e7295052c00af4f088b6e7173e 30676088 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 1f87aec3587cc753f6145d018ff5869ed42ec6120b57f44bc44fc796ead8f5df 51560044 chromium-headless-shell_149.0.7827.196-1~deb12u1_arm64.deb 7eb01746b772fa719c6daf762dbf4b68d55f6f0fdc389282e8f2907b29c951b0 20244 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 670bc2eb0ecd1dc6102a3b870fb124c40325e2ddae51e6eb914d6965aae0ad3f 128840 chromium-sandbox_149.0.7827.196-1~deb12u1_arm64.deb dbee5f1fae3b0c20a19cfe05881ed86382b0edf161625fc41caad4f632a68a97 33136556 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb f4ab644d742137226e17d064cc6f2417ec89ac976690c8714034006c8622a355 56484800 chromium-shell_149.0.7827.196-1~deb12u1_arm64.deb 4649dcffdf2ef9c4700b541367d4033ab8ebb1029299bcd233caa9e4fbda7371 30477 chromium_149.0.7827.196-1~deb12u1_arm64-buildd.buildinfo 0645055ee1e976a9ed432b6f8aba84da015e6e76eb0ceaecbe1e1dca30d36a4e 65762012 chromium_149.0.7827.196-1~deb12u1_arm64.deb Files: b93d6719edae754c66c167c112501a82 6468168 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 7f898f2970b49906ea8934ad9901bcdd 30959536 web optional chromium-common_149.0.7827.196-1~deb12u1_arm64.deb 779fb3a90f665bd91232074a0a92c4f5 37832764 debug optional chromium-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 216cd9d80b6e59314999b4f7db2f78cb 6922460 web optional chromium-driver_149.0.7827.196-1~deb12u1_arm64.deb 42fd7ee89e5ccc390e746b4fb821b599 30676088 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb 15b33e26fbc7553fb78d5151d9fbe14e 51560044 web optional chromium-headless-shell_149.0.7827.196-1~deb12u1_arm64.deb ca5cb658262499f6e941e25ee9c8b45e 20244 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb fdfee66dc8681c215d9bff068cd42fca 128840 web optional chromium-sandbox_149.0.7827.196-1~deb12u1_arm64.deb 54e81ee65ee30b6837d1b26819cb34a0 33136556 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_arm64.deb bb5268adfd205061e369665324f31666 56484800 web optional chromium-shell_149.0.7827.196-1~deb12u1_arm64.deb 1f3e888d866557483d83083cf6902e38 30477 web optional chromium_149.0.7827.196-1~deb12u1_arm64-buildd.buildinfo eccd6af9b207d81936fe4c9be2f04c05 65762012 web optional chromium_149.0.7827.196-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmo9tLoACgkQnwznazfj XTqugBAAiYn56k04ekMa03Te6ImNuPICOx4W+Uo4z8Tkd4bMMjlt2feQY0AkdFcX 4MICxh/mZNZx2wBLJ0C7octWJwNSRqdqLHTKdE0R8pJU9/9haSBzFJRDn+T7KYLz 86TiX+f/oBw7AhzHUWcFVok5r1O5m7AbMml4Qfe2Ro9fH4sFWiO2D/y3vWRQgjgO azwoXZKDpnE/LTxDH7NDS4RQVyZ3JR4rOeckqdnQjV2YjXBkSX+UDV4sPE0kKQB/ 2CD88AKblOgdLe1RIGm/Y9DYPxCjmGsW93TPYTN6gv4SXHOhPZrUKNz11083lRk3 /SRYd5KG5Su9whdSn9Xzc0aWTHdcBr1h1aFveIAyPtH4QSKMJ2kbUyfaPg08OyA/ 5CpLEOqsZvHSaVe1aWG8LCzhtq1wptw0ZUnN/64uq9VfYFzb+6batNQcpG+Bqudg Kgl7GucxdujErYOBs+OsAvJoTR1rcz3K3/7GyU4/GG1bsSz15af+BX6oukWSLT9N CCadYvff+RrMNTuhwS7elPkZVhBsiNAA0sNdR/u5DrUsVFKvJFTxOJ05d8DbwgGH brqOMaUJsqMz/TewLHiqIIIhpx4VQqxWe7kktlKp5Y1RfW7otRf36tQPdpnbLt/9 N6XQmEwo3YPru04YWRz839G+gmcVKqgXioKA2WNY3w+ncmNMTxg= =vvPL -----END PGP SIGNATURE-----