-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 149.0.7827.196-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: b357e53da5800a401c2793d3f4f459f9e6895a4c 5511696 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 098ec4a8fe2e76c66f942ad2e2133f75fbd2a13d 26312648 chromium-common_149.0.7827.196-1~deb12u1_amd64.deb 2942675f51fd3a42090516cba28e822ab18acc94 35984684 chromium-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb d0d5d05db595c164f7efa7f254eb574e3c7e4afd 7745112 chromium-driver_149.0.7827.196-1~deb12u1_amd64.deb 07cac9593759b34179863305d0576f43daace714 29604788 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb d0e77bbe8daedcf9cdf3c0a7fa0f84d83b02629d 58173140 chromium-headless-shell_149.0.7827.196-1~deb12u1_amd64.deb 809d7d3f4c2bd6587def9e96194a92af54fba069 19284 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 48701ce3ed3bd9cf6008862fb67d6decc3cc6569 128104 chromium-sandbox_149.0.7827.196-1~deb12u1_amd64.deb e736535f2defd564f21b6cd7e576ced88c282c0b 32538552 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 3f29651c66ef08a04c1717ebad9c1c3921a7f9e4 63819784 chromium-shell_149.0.7827.196-1~deb12u1_amd64.deb e433a4dd49362232ddbc652dffc71ce2ccf21479 30496 chromium_149.0.7827.196-1~deb12u1_amd64-buildd.buildinfo b7b0674e68b94af0158bfa8c305a46fc07f6f7c5 75567096 chromium_149.0.7827.196-1~deb12u1_amd64.deb Checksums-Sha256: 4de5efe6f3195de6646d0b4e1616c67567c33f5508ffb06e6c17e46f1b33a196 5511696 chromium-common-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb e3cfb44b2740bf9e7c609f5ac645d95fe214937cf6ca2b6195d22d7834476d95 26312648 chromium-common_149.0.7827.196-1~deb12u1_amd64.deb 9ee056a7bdd5892e4723ffcff917fff3afb43dc751f101eea1158c07c3dfe5d1 35984684 chromium-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 27ee4502fa5e5f1f903befd72255f5ebe3301e0d3783dbc48dc2fcf45166cdb6 7745112 chromium-driver_149.0.7827.196-1~deb12u1_amd64.deb c6642f7ce05654632c99ca6348a25d06ae3bf1c2da3c3815f1947dd6ae9d62ba 29604788 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 6dfb48fb9c0fd019411f4f5bc8c9928930c8a6e57387f995dac510a243d8e6c0 58173140 chromium-headless-shell_149.0.7827.196-1~deb12u1_amd64.deb 5b10e58aa53e7c0e5f4594e5da045acfd81a566ddbaf908bb80414f609b70386 19284 chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 90eb83ff9775f5b7505dce0f80edce18cb26c3b18c38ec40fa2046f5c85126c0 128104 chromium-sandbox_149.0.7827.196-1~deb12u1_amd64.deb dfd90bd77c476b60b4acc8f707942e7af228c72466e9eca4a4785c76cd15fe05 32538552 chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 49215e816ada3ce405c760f7f2de00fc36ffa46e0e85608acd38fcbb40bc48d9 63819784 chromium-shell_149.0.7827.196-1~deb12u1_amd64.deb 3960bb096aa1f60d7b517f0ada0c3e9ec59a69797648045d8c514585fd9e1f8a 30496 chromium_149.0.7827.196-1~deb12u1_amd64-buildd.buildinfo bcb4f88665e34d582bfdb8de9d45402cad7e9cf542636db34061f235d6b087ec 75567096 chromium_149.0.7827.196-1~deb12u1_amd64.deb Files: 4253eb0a27f42db199361d9b7db31d6a 5511696 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb a780eed42dd9e9b1f42da2eff5978bae 26312648 web optional chromium-common_149.0.7827.196-1~deb12u1_amd64.deb c7eb556f938a550bc42485c39bb9a09d 35984684 debug optional chromium-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb baad9adafe8833502407023d61fb6cd9 7745112 web optional chromium-driver_149.0.7827.196-1~deb12u1_amd64.deb 50f1c184a305f7d788561c84449d75e6 29604788 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 6210e799088d639f0a9295383901f0d7 58173140 web optional chromium-headless-shell_149.0.7827.196-1~deb12u1_amd64.deb b4aafd235e0b2c23c835e114d359325e 19284 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb b9043db4848559ce569e497136c17157 128104 web optional chromium-sandbox_149.0.7827.196-1~deb12u1_amd64.deb 7e70022efe9b84a26ec3518cff44cf90 32538552 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb12u1_amd64.deb 55961a603d137307db5336940265a1c0 63819784 web optional chromium-shell_149.0.7827.196-1~deb12u1_amd64.deb 553244c03a152ddc55c04fc42cfc5afc 30496 web optional chromium_149.0.7827.196-1~deb12u1_amd64-buildd.buildinfo f37a3fbd2a5de113784f35423176a783 75567096 web optional chromium_149.0.7827.196-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmo9ofQACgkQPkCWRKsh 20eWnRAAkYu8KGhTA951B4gIZK90DtHlixf3hewLKELAtIkn/tDuT8N1NdDyAKfm SyiGrx6PTdzq/kjqbyb2btpwH6MbOCiX6PMaPQomoCiWMrHxo+LXsBE8uF+vMOvu ljStBEKpf2c2KX9CY3EypEcSvP1FYhfchBsmgUwREw+Y9mgkMT8BTqFgwzzPwU+L P+kkPP1io2e8NfxwIu3F/M2jZWpkjdcUiooTg30V/lphW30yZeLNivnO5JWEBe7B t9n19ngBHVRD6f4cpMmBsI5hIPuGqvN/C8zzxZS3UPeqzQevHo29K55faeM2ouWu q9bt3Tn9EhqFQmRLqNOfUlBY1ibrmfnX0iHoOSh7cHek+aGJ4mZWhg/p4VK2NdCx h9MQwN+lqR9hBvPgfTyhmSZWSn2BqMWEHMKqc6Fj7uf25N++djTYBgYJST+c1Cn3 MvBSjDvTqNW45c6yUQvSKgBqYdvKuwLZKR76AkIVdUg/nenHf2zgxoHSJgRKh9Zn nnoQqptAJg2bOTtfFAz6s5TGIZf1yyYesQT68qI1nGx/cwjj8ICMO5IKE98TTicE 0lmFoWI1OkDoqttR/h0xPnaWx0xbjRavMFEPNWQz0Fvao+YnW/g6qCOE8sgJnbgW 7QuXWJEXgOwztu2f/53trMPJPjcvBnQvU3bZfw82CS2RuqiCxS8= =t4pa -----END PGP SIGNATURE-----