-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jul 2026 23:21:54 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 150.0.7871.181-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (150.0.7871.181-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-15899: Use after free in CameraCapture. Reported by Google. - CVE-2026-15900: Use after free in GPU. Reported by Google. - CVE-2026-15901: Use after free in Network. Reported by Google. - CVE-2026-15902: Use after free in Cast. Reported by Google. - CVE-2026-15903: Out of bounds read and write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-15904: Use after free in Ozone. Reported by Google. - CVE-2026-15905: Use after free in Aura. Reported by Google. - CVE-2026-16420: Type Confusion in WebAudio. Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt. - CVE-2026-16421: Inappropriate implementation in WebAudio. Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt. - CVE-2026-16413: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-16414: Insufficient validation of untrusted input in Chromecast. Reported by Google. - CVE-2026-16415: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-16416: Integer overflow in Chromecast. Reported by Google. - CVE-2026-16417: Uninitialized Use in Skia. Reported by Google. - CVE-2026-16418: Stack buffer overflow in V8. Reported by Google. - CVE-2026-16419: Out of bounds read and write in ANGLE. Reported by Google. - CVE-2026-16422: Insufficient validation of untrusted input in Certificate. Reported by Google. - CVE-2026-16423: Use after free in UI. Reported by Google. - CVE-2026-16424: Use after free in GPU. Reported by Google. Checksums-Sha1: bea7fddb51261612fb01b523b019253e04f0a828 5208184 chromium-common-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb bbb65839d5ba81d880e015a2c55b651e40d9a2aa 26688900 chromium-common_150.0.7871.181-1~deb13u1_amd64.deb aa7606037fe4eb34aca66b4fb6e15786dff57776 33881376 chromium-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb c68e6e06d15e5d0db7c8d728ec09614cd1b9235b 8023472 chromium-driver_150.0.7871.181-1~deb13u1_amd64.deb 9b809bf7194e3f77720fd0fd2ebef33a7a3ad3f6 28612704 chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 29a176f36b2b4b84fab09bbd2eddfbe935c475ec 64271216 chromium-headless-shell_150.0.7871.181-1~deb13u1_amd64.deb cd0187a26775774cb3727982245731086c7d3359 20228 chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 9aa9ed01ae14de68b8bca3150de99142468b9646 132216 chromium-sandbox_150.0.7871.181-1~deb13u1_amd64.deb d9f012631c24130b7af887d35c002d0735e7d33a 30276140 chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb e590ce369e82ee0b0bc9d6872c79d1be97c6f072 63948888 chromium-shell_150.0.7871.181-1~deb13u1_amd64.deb ca50f033f38081a02f8392e0aa9d5f754faec1a1 30953 chromium_150.0.7871.181-1~deb13u1_amd64-buildd.buildinfo f24e8fd6b8678212c09e25a8d4b77c243752b765 87253940 chromium_150.0.7871.181-1~deb13u1_amd64.deb Checksums-Sha256: 6756d18f4cf8698793544000200eab914b0cc006a4289fb8f538ee8dde811bb8 5208184 chromium-common-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb af485fc598a556096df0f23d77d491a9f78307721d9b22aefd7d685c2c42c4ee 26688900 chromium-common_150.0.7871.181-1~deb13u1_amd64.deb 9e05d867abcabbc8e31abae5bb16188508b888860463d7c7db83dd6bf30718d5 33881376 chromium-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 75104a4e7f25837fad515bb3cab2ae1d34d7e29f5b97c675d9aaec95be5ca718 8023472 chromium-driver_150.0.7871.181-1~deb13u1_amd64.deb d6327c65268ccc31a0cd49789585ed5371124678993ed8ee446242c59cb098e4 28612704 chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 868de3f3aa0d65b07d1f1dd828872f8f01ef65bf6fddc3de7b694a210945ba7e 64271216 chromium-headless-shell_150.0.7871.181-1~deb13u1_amd64.deb bbdac3aafbec54a7e3402e7195f76459b05d6c988e24a4c07b9c9cf91c390c69 20228 chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 4f2d02e74f89faf1e4e2d193902c29130deafe5f0242748567b0d82bc725525f 132216 chromium-sandbox_150.0.7871.181-1~deb13u1_amd64.deb 0c96009e41ce34184295b1e3e52748cb8c38851dab5311abda4916815cfdd8d1 30276140 chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 5e06e7a2e9d3f81fd8303daa26bb36df44a7179a6acd45454c459d5d1fc50a84 63948888 chromium-shell_150.0.7871.181-1~deb13u1_amd64.deb c7021d6ff60ad694797a25792b39fcc98c2bcaa08195eace4320724213959089 30953 chromium_150.0.7871.181-1~deb13u1_amd64-buildd.buildinfo 581780e30ef1c04cefcb3eef2c754b80fad8654c38255feb2f957d0cb1a199fa 87253940 chromium_150.0.7871.181-1~deb13u1_amd64.deb Files: cfde212bded2fbeb29972e3289393caf 5208184 debug optional chromium-common-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 6989f1fc8d6bcadb8504f4e92ee57500 26688900 web optional chromium-common_150.0.7871.181-1~deb13u1_amd64.deb 962166d2e267bee762681cee9a4ef92d 33881376 debug optional chromium-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb 868309c8c6987f715191548767bdf009 8023472 web optional chromium-driver_150.0.7871.181-1~deb13u1_amd64.deb 4ec43353f5bb729d047a371dabeefc14 28612704 debug optional chromium-headless-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb c9a5a26fc52b7b7a791d031156af2698 64271216 web optional chromium-headless-shell_150.0.7871.181-1~deb13u1_amd64.deb ffed3662e3b03abd77a55f55553be8fd 20228 debug optional chromium-sandbox-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb b8902d898ec686655db96c516d2db3b1 132216 web optional chromium-sandbox_150.0.7871.181-1~deb13u1_amd64.deb 4e69f01326d3c79f7d3139a01688bd3e 30276140 debug optional chromium-shell-dbgsym_150.0.7871.181-1~deb13u1_amd64.deb d1595c1c8ec518c7a7304173f4ff1d30 63948888 web optional chromium-shell_150.0.7871.181-1~deb13u1_amd64.deb 2a6ee2bfac8e98ee793d99057d7e4331 30953 web optional chromium_150.0.7871.181-1~deb13u1_amd64-buildd.buildinfo a9175dd8cf8d9f88b06cb8c8489eb4a7 87253940 web optional chromium_150.0.7871.181-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmphST8ACgkQbheoBegw XLLjRQ//ZpPAtqtXwR2LjoL8TFvT7O/rrp9sqDzGmazaSL+UT9iEmQ6dZqLAUHk4 jdVO0w61IByYTw/HcDAR3QIyYqcH3LNPZFAkEQJ4hyCeAV/w6IoRGEc0uvCuum5/ BEUJhEuCsxCYeS2H3OeOtvFwGZWzGkywlQBBebTdTcTNGRHyiPY2vsWGZ3dleHp2 Vgng0cj0u4ycc8bcupWZOgNEY+50gCUXjvPmLfaGr2SdPKw1UHf2tg+0M8WDCDYl pHZbaOzqveLJyvREWt/afo1E4V3UfOMI5Ky/Huz9VrWqZk60ha1JLg90gBXLmM2t kDt7qroKw94Ppvsf3RWCeQxvs5CRVuRwlFbTDdXc2wWBp2N2IDjjDiyw1RQ4AUhD xKQKR6Cq95CpG8ReQXv+1Nu8EOVgfOOsGIk4CCTOq2BY6ukzZaq/vp3FG4B4upHj DY9TZRzSfr/AuEBvgwgY8+daB7UxmSLL0LrDgmJEh0Ofz1dErqixMZ2Bkh3LQzR2 CvLb7mfj1XxhyZGbwiFPy0eknwoPH/Oy7lm1ZYvMOXGNB9BGUvGfw1GyWXZ8KanQ NW1uPRNPhTbiCpSmu9+vj31Y0+i+9XOQSiHPC7kepbXSdUtS6bTLjgEgfj6Op22q kjIdPthP/1GJWVTjuDH3KGau1xbK9QhZnMX4ST1zwDV/NGmZ2LM= =8X4b -----END PGP SIGNATURE-----