-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 149.0.7827.196-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: 640774a18f8c5d66ba6f9c43ce27b8d0b03c6898 5314572 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 2217dc379db9d5e949e149d656355efd05385c1c 26276132 chromium-common_149.0.7827.196-1~deb12u1_i386.deb 6854965577275d569c82556cd0f5a06890aed3a3 36207412 chromium-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 65b71ab4789bbec8819abdf62f8290bc3c2f1731 8119092 chromium-driver_149.0.7827.196-1~deb12u1_i386.deb 441985fee2c2e1d4fbaa7ded64303fa6db43b080 29793584 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb f0b27e1ca78a28a2b82deeb94a1fa0f5e6e777fa 59827904 chromium-headless-shell_149.0.7827.196-1~deb12u1_i386.deb 33800f6b99aa0a967d8dae4c4fa90d497a977792 17816 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 27ae0e37225c5f5c0a370e644c47dd3dfee779d9 127984 chromium-sandbox_149.0.7827.196-1~deb12u1_i386.deb 4b7a0e22685872a2ce88e325714450e0b9b53995 32722992 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 2ef779551aa23152d48d52246251ae9c14a00561 65596048 chromium-shell_149.0.7827.196-1~deb12u1_i386.deb a7044fa1726aaba2ad00a3ed9014654d4f899a45 30494 chromium_149.0.7827.196-1~deb12u1_i386-buildd.buildinfo bf10fda91080a9cdcafe984ded82317f19b9f24d 78101572 chromium_149.0.7827.196-1~deb12u1_i386.deb Checksums-Sha256: e3cbd41e850907013e8e20dde52099c7ed6c09a09ab9926ca5c61843207fbb29 5314572 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_i386.deb db2a3f20b2d08b53cb77f40fde5e6aa047a805a89f91cf62af8f7aedf14da5ff 26276132 chromium-common_149.0.7827.196-1~deb12u1_i386.deb f97cb045846c5e1f630b7734f74de6f8eaeba56fb7619b46ce0d91ae23f24585 36207412 chromium-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 639e0326f33ef770c8b403d6c4bb6cd8f49cde5ebfaad17e59aab96fe9946d86 8119092 chromium-driver_149.0.7827.196-1~deb12u1_i386.deb eb9fa879765b7f28d9280c3ff044eb3bfaa1967c07b3c0acf2edc17b337aeb19 29793584 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 0b56aa17243cdc06e89580acc28a03429c997e20c7d565e65dc295478a1c2a90 59827904 chromium-headless-shell_149.0.7827.196-1~deb12u1_i386.deb b22348b6887708105c90aad7f5de20832dcc21ef6ab885805a7b13300d4a47aa 17816 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 0d9dd70a334a506ffac57c7e47f3f4d1df4735de643dc6754807518d7a85c45b 127984 chromium-sandbox_149.0.7827.196-1~deb12u1_i386.deb baff2114edb703eb4bf83b39456eaf87cd4cea6c862ecd334bc3c5bd24e0ec34 32722992 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb f9be039d098cdb6fbe5b3e49b12d776ced88795be0c1fb8bb7ca9aca35397684 65596048 chromium-shell_149.0.7827.196-1~deb12u1_i386.deb e8b8270a52e4708061014fad91b74825725791986e331df87b2f9ce1a2c599f5 30494 chromium_149.0.7827.196-1~deb12u1_i386-buildd.buildinfo ab8fa0c04c4dafa1fa479cf00c5f08f4f5f44860ae48aec6daca89a8dd0dab41 78101572 chromium_149.0.7827.196-1~deb12u1_i386.deb Files: 10176c969c004e3dfb48ea29d9436894 5314572 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 9f9e3c9f0272e2f14497188cd456a7af 26276132 web optional chromium-common_149.0.7827.196-1~deb12u1_i386.deb ca3e77a11d2dd63e2ff97e755515a3f9 36207412 debug optional chromium-dbgsym_149.0.7827.196-1~deb12u1_i386.deb b676b2ca09bb32abfa3468d402072522 8119092 web optional chromium-driver_149.0.7827.196-1~deb12u1_i386.deb 831826bc9224f6a63f5b26fa790e9b3b 29793584 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb f673042b858b6cf87734f57d3babe2e4 59827904 web optional chromium-headless-shell_149.0.7827.196-1~deb12u1_i386.deb 23cb98ca73a06d634958d799b617c6f1 17816 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_i386.deb 0f36fcc28f7146921f6937177d6634e2 127984 web optional chromium-sandbox_149.0.7827.196-1~deb12u1_i386.deb 493acb695d861e9a33b29782077c3e36 32722992 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_i386.deb e81126be1922e157f164405f7d23fb4e 65596048 web optional chromium-shell_149.0.7827.196-1~deb12u1_i386.deb e1dd37fd7f1b830582529d6650e577a4 30494 web optional chromium_149.0.7827.196-1~deb12u1_i386-buildd.buildinfo 3826d668b5b3f41c683f819f787803f4 78101572 web optional chromium_149.0.7827.196-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmo9xK4ACgkQf2INRiCd aWJHDA/8Cva91eL91n32sWu0krS1W7SomoOhySz6OZh0x8XDJPeADyjXnHOibyBS GPDki2f4UhK9/AmgVcidY5CB6bowYlg1bXzidoIziYn7Ov/DhAtbqjW4uLajniXR Cf5aHiB0kr0iWhYxeWCJ0mIomfYbhbi7JCee0GU6s7zIsHL+l6CwytQ+7FVR3NWz z5Y5vJOyINAWcANmKJGVG4f5WY+/YNaQJ505CHx6oQOrsSQX3iADUKoAKMc2Jx+D 5emIijrl4QY/0FZ4vbsQ3I9IOFAiTPwjS6hKVfoPvhpLDbP8TA0HVEocRlXoMPWc Th92uAT34lgkGFefBFw29e1RUU97WSd13WY1x+MmcGclBLMbWtQ9Q3wgvpyOGOFz WGjTiuiho+bQBXGsj8G6WwEM6QH+MJT2oCKfIXYsvuvFpvTo/9LFAD6E7hKauXMZ L3O8SJ/hN580zrGqOLZ8Xx33UhujapI2C1kS86bdaxOVSgKotyfN0HVIpm5JSgd8 FCuZ5tYLt4zvL8GokP4wcTCl4kxHA6N1Op4H2Ke8SUU0bcYHNJ6VPDT2PjtJKEdI uW2tAOg2MvHqiJPhL4rOm8I/USrOlw32Qsxdb3WBAKJW6ggSZbnAP31hAnlNPM1d VsVNXKe3SqD9WyPujkqS7DxpNFu1XcYBaO6d+wu7HJ8CwURoQ08= =YnfG -----END PGP SIGNATURE-----