-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 149.0.7827.196-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: f76d010a687a8242a62f1f1f0a5a31fc96227d8a 5796452 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 5c8e3524c9502e757d543ac549dcbde7b5dd4827 26045612 chromium-common_149.0.7827.196-1~deb12u1_armhf.deb 8f8b4f5ce55c94d67ce39cc1114db2641caf896b 35503892 chromium-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 5d8506a48299fbdd9d1486bee4d7a01fdeacffaf 7381340 chromium-driver_149.0.7827.196-1~deb12u1_armhf.deb b4ded4ba0c509affc707796c57c108464e466074 27542468 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 1ec2e3a03502bc635041579cc134327c634eca0f 54980136 chromium-headless-shell_149.0.7827.196-1~deb12u1_armhf.deb ab5af813d472f5613ac43603407220d102e4c659 18000 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 2773fd21f8ca329ce372d1652eabbf8f4a2693d3 127740 chromium-sandbox_149.0.7827.196-1~deb12u1_armhf.deb 08ef0e3fb1d45c2a1830b422b1d5898dbc87de13 30011952 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 451873f96fd2fe0e592e9bd443b0ed0c6472c4b4 60405940 chromium-shell_149.0.7827.196-1~deb12u1_armhf.deb 4c843b68a4fd09fcb4d8eaf78b40bab38c311785 30387 chromium_149.0.7827.196-1~deb12u1_armhf-buildd.buildinfo 1f4fc641fee616af898083730e70c53b58fe7af8 71962336 chromium_149.0.7827.196-1~deb12u1_armhf.deb Checksums-Sha256: 34259ca2e8652cc1922f34de039dde6822cb5d96204f29c47cd02c0d8bda68d9 5796452 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb e4bcfd728a484a5dc54640050392cd795c6f8d07fb7ea460d5a3fb40f8fe1a3c 26045612 chromium-common_149.0.7827.196-1~deb12u1_armhf.deb a93cdec63f1777fc298b8b4186ed7234cf000e84a7f221b08d899fcc53ead4ef 35503892 chromium-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb ff00689a135b8a2ce82ac0ec33215fcc3c218d0ac148348dbe17c897e27ab54d 7381340 chromium-driver_149.0.7827.196-1~deb12u1_armhf.deb 32bd4c047027dc614f1badda4223c24b696748ea29c597d9c8a90e101a2c128a 27542468 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 4b81588e7c1e66ee099c07fc3684ce863a0f544b4ac708234d4c2d11886417aa 54980136 chromium-headless-shell_149.0.7827.196-1~deb12u1_armhf.deb 54f6dabc2659059457f3dcec757457d5ca1f7d63673bdc15643f63c300a22e2b 18000 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb bfb7f9114a5fb602e303f8eb857a8e634af1873bb2eed6df31e2bed9adcf4b12 127740 chromium-sandbox_149.0.7827.196-1~deb12u1_armhf.deb 59c6a330ac7df8bebcd473d3d36ddd8c149c5f011576cf326715414249cfbcf8 30011952 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 7eeca4175fb57e7dd3d613fc82c3b5cf966755fd5b24787868cd7e37d9ef0e0c 60405940 chromium-shell_149.0.7827.196-1~deb12u1_armhf.deb 05456f6e096c1f817d58b7e5346b65f7e5256f5e9f41421a19c7485f3f064134 30387 chromium_149.0.7827.196-1~deb12u1_armhf-buildd.buildinfo 3ef955d153dc2b5f67000437ee3dc3fae3a6ffa4e4ffe69f06bb88ddcf217373 71962336 chromium_149.0.7827.196-1~deb12u1_armhf.deb Files: 16e27157758a56ae4ce11c9e0f84aa2d 5796452 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb ad36f3a3c5ed6562b26561543d4de28c 26045612 web optional chromium-common_149.0.7827.196-1~deb12u1_armhf.deb ff177058b34f432c6a5bf5c914b0e117 35503892 debug optional chromium-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb aac85b4f3073ca286e3764e39ea6b72d 7381340 web optional chromium-driver_149.0.7827.196-1~deb12u1_armhf.deb ee5fc71f89117021e1a63d7f0f631a8b 27542468 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb 1975f890c351977789515801a36da80d 54980136 web optional chromium-headless-shell_149.0.7827.196-1~deb12u1_armhf.deb 0c887a924fdd614d92e09b84492a9d85 18000 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb f3eedc906f1d99669e185c9f0b9d5c78 127740 web optional chromium-sandbox_149.0.7827.196-1~deb12u1_armhf.deb 41be90e73fbd2eed8131155d8030bf9b 30011952 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_armhf.deb a01f685587b95238e1af89a6fa1ebbd9 60405940 web optional chromium-shell_149.0.7827.196-1~deb12u1_armhf.deb 9993a529ac1103a459dc015a24579ea7 30387 web optional chromium_149.0.7827.196-1~deb12u1_armhf-buildd.buildinfo 9f044096143f0cee6411aeba227fb951 71962336 web optional chromium_149.0.7827.196-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmo9vpYACgkQK1PZBedP sppzVg//dc+1xfVuDECGehsMQafqdoU8oUO8OrRp1jgmIoqm6DtqgYTp1LKF6urN njtD/tQdvNanBbXl3oYxPZKctfJAYFZRW25jKF87WBoibqzoDuKp6Er2WqKhNKN3 oMFB7yRydPluQv2b1sG3yqppfJ+q1PTIn9HgwuZWb8t5QhsIANIkRGiuQjzLU9eU WrjcemT9zD2l+xWu54Pe/9pZUjAFG2tsOdA2d1LsFJ6qFJ6FS2k6kEecSHtVLD2h h0bmzaleBrC9QDUZH5E7HwpFkPj9kmFIs+30LAN1u9GFbLb3d6NFaf4w4PjaK8Aq t/E4s7/NIhfvoEzEmu7XRDR4AJ8KZE0chJs6VBrZY8fE4PqaiRzKMt4zMk7mSDdA owmPMwtTpx4xS9iD+IZrMSHLU40ahwSfpK2ZE5fyjIf6YGhVvimHZ+5tj29SwCC/ +1dRQTNGV/eJAu80zztwncXArQLsU+8AIPENTrsdK1RAMWSrzar/TPtsYvE/xGU+ QOIJ4uemd16eHPpOVQaThdM1yuLaaIjrEXKVWZyJnmMu9hlyHhknl1dRUOGIpB6I YGqmeI8a41w0LZp0JAuMEGtxb5/pnQ8W1FMsj1upMk7X9hKqt1cBgCGrk+8qFwtP 9LlkxNYYcXWZIE7dVqqj0hLXkExd6a3qqIPpELLSn2+k958nnFc= =aucl -----END PGP SIGNATURE-----