-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 23 Jun 2026 20:40:58 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 149.0.7827.196-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (149.0.7827.196-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-13028: Use after free in WebGL. Reported by anonymous.
     - CVE-2026-13032: Use after free in WebGL. Reported by Google.
     - CVE-2026-13033: Out of bounds read in Blink>InterestGroups.
       Reported by Google.
     - CVE-2026-13038: Use after free in Autofill. Reported by Google.
     - CVE-2026-13021: Inappropriate implementation in
       DeviceBoundSessionCredentials. Reported by Google.
     - CVE-2026-13022: Inappropriate implementation in Autofill.
       Reported by Google.
     - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google.
     - CVE-2026-13024: Insufficient validation of untrusted input in
       Navigation. Reported by Google.
     - CVE-2026-13025: Insufficient validation of untrusted input in DevTools.
       Reported by Google.
     - CVE-2026-13026: Use after free in Digital Credentials.
       Reported by Google.
     - CVE-2026-13027: Use after free in FileSystem. Reported by Google.
     - CVE-2026-13029: Use after free in Web Authentication. Reported by Google
     - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google.
     - CVE-2026-13031: Use after free in Blink. Reported by Google.
     - CVE-2026-13034: Inappropriate implementation in Passwords.
       Reported by Google.
     - CVE-2026-13035: Use after free in Bluetooth. Reported by Google.
     - CVE-2026-13036: Use after free in Blink. Reported by Google.
     - CVE-2026-13037: Use after free in WebView. Reported by Google.
Checksums-Sha1:
 0e767b61d742c34e1f8efc2500f33acd4202b358 8934640 chromium-l10n_149.0.7827.196-1~deb13u1_all.deb
 933a228742bb8ab90216771dfa1254020f31855f 27170 chromium_149.0.7827.196-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 51d0d380e36f61cc7346284497d59766a239414e387c46e73be7482aad656f9a 8934640 chromium-l10n_149.0.7827.196-1~deb13u1_all.deb
 6c72ac179934aca1762bb675efaea2b1065b3de1ed3c896b37c920e8dbd19245 27170 chromium_149.0.7827.196-1~deb13u1_all-buildd.buildinfo
Files:
 8e14b21f6ef746f39fda3fea6c790566 8934640 localization optional chromium-l10n_149.0.7827.196-1~deb13u1_all.deb
 93b59ee81023d0658e459071b5571f24 27170 web optional chromium_149.0.7827.196-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=JxKY
-----END PGP SIGNATURE-----