-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Aug 2026 12:19:50 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 151.0.7922.108-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (151.0.7922.108-1~deb13u1) trixie-security; urgency=high . [ Daniel Richard G. ] * d/deb_pre_gen.py: Minor fixes to the pre-gen framework: - Always record target outputs in an .OUTPUTS file, even if a target has only a single output. This incurs only a small (tarball) size penalty, and catches cases where there is disagreement on which is the first output file of a .ninja target. - Update the handling logic for generate_css_js_files.js, as the first output file of the .ninja target changed from v150. - Add an extra check to ensure that target outputs are unique. * d/patches/debianization/pre-gen.patch: Tweak a script so that it outputs a constant UUID, instead of one dependent on the build path. * d/patches/system/golang.patch: Prevent the Go compiler from writing things into our home dir, or accessing the network. * d/scripts/init-pre-gen.sh: Don't hard-code the package name, as we might be doing init-pre-gen for ungoogled-chromium. . [ Andres Salomon ] * New upstream security release. - CVE-2026-19137: Use after free in WebGL. Reported by anonymous. - CVE-2026-19149: Use after free in Aura. Reported by Google. - CVE-2026-19154: Use after free in Skia. Reported by Google. - CVE-2026-19157: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-19170: Use after free in WebGL. Reported by Muhammad Alifa Ramdhan, Pan ZhenPeng, Billy Jheng Bing Jhong of STAR Labs SG Pte. Ltd. - CVE-2026-19172: Use after free in Views. Reported by Google. - CVE-2026-19169: Insufficient validation of untrusted input in Contextual Tasks. Reported by Sven Dysthe (@svn-dys). - CVE-2026-19168: Inappropriate implementation in V8. Reported by XBOW and triaged by Andrés Luksenberg. - CVE-2026-19138: Heap buffer overflow in CrashReporting. Reported by Google. - CVE-2026-19139: Race in CredentialProvider. Reported by Google. - CVE-2026-19140: Use after free in GPU. Reported by Google. - CVE-2026-19141: Use after free in Resources. Reported by Google. - CVE-2026-19142: Use after free in Views. Reported by Google. - CVE-2026-19143: Insufficient validation of untrusted input in WebAPKs. Reported by Google. - CVE-2026-19144: Use after free in HTML. Reported by Google. - CVE-2026-19145: Use after free in Translate. Reported by Google. - CVE-2026-19146: Uninitialized Use in GPU. Reported by Google. - CVE-2026-19147: Use after free in Aura. Reported by Google. - CVE-2026-19148: Out of bounds write in GPU. Reported by Google. - CVE-2026-19150: Inappropriate implementation in V8. Reported by Google. - CVE-2026-19151: Use after free in V8. Reported by Google. - CVE-2026-19152: Inappropriate implementation in Navigation. Reported by Google. - CVE-2026-19153: Insufficient validation of untrusted input in Workers. Reported by Google. - CVE-2026-19155: Use after free in Payments. Reported by Google. - CVE-2026-19156: Heap buffer overflow in Base. Reported by Viktoria Zlatinova. - CVE-2026-19158: Use after free in Views. Reported by Google. - CVE-2026-19159: Use after free in Views. Reported by Google. - CVE-2026-19160: Uninitialized Use in Skia. Reported by Google. - CVE-2026-19161: Uninitialized Use in Skia. Reported by Google. - CVE-2026-19162: Out of bounds write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-19163: Use after free in Media. Reported by Google. - CVE-2026-19164: Insufficient validation of untrusted input in Codecs. Reported by Google. - CVE-2026-19165: Use after free in Extensions. Reported by @bean5oup. - CVE-2026-19166: Use after free in Web Authentication. Reported by heesun. - CVE-2026-19167: Integer overflow in GPU. Reported by Google. - CVE-2026-19171: Use after free in Media. Reported by Google. - CVE-2026-19173: Out of bounds write in Skia. Reported by Vu Van Tien (@n0_Be3r). - CVE-2026-19174: Integer overflow in V8. Reported by Seunghyun Lee (@0x10n) of QED Audit (qedaudit.io). - CVE-2026-19175: Use after free in Payments. Reported by Google. - CVE-2026-19176: Use after free in Skia. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-19177: Insufficient validation of untrusted input in UI. Reported by Fabian Wahle (Hap Security). Checksums-Sha1: dbc229113b2a93f187f2195d8887ed9dba6dd2e7 5307192 chromium-common-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 45915e6760b981acdbd2d53eae6f681adc0ce6aa 35549744 chromium-common_151.0.7922.108-1~deb13u1_ppc64el.deb 9a6147fa9f5f825f38a4c97a3f74ffff74b20df6 31093576 chromium-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 5f17747aa7b5cbf8a366d0b3e413666790999278 7654668 chromium-driver_151.0.7922.108-1~deb13u1_ppc64el.deb b7a0d0fba51e4cf3fac99cf4ff8613b79b955ff4 25483100 chromium-headless-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 3ac5577d61fad29ef181dc5fd2b2fabc31f2f2c3 62083660 chromium-headless-shell_151.0.7922.108-1~deb13u1_ppc64el.deb e05fa1ca86970be7ca2338a10e93783be7183151 20392 chromium-sandbox-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 1f1d954626617a310386bfabcb203f9f42ef999f 138136 chromium-sandbox_151.0.7922.108-1~deb13u1_ppc64el.deb a71e034f43b62e217ebc1054eff6d93bb45dea4f 26579244 chromium-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 77ca87596eff0797355aa05bb2f2ef8836df205a 62019008 chromium-shell_151.0.7922.108-1~deb13u1_ppc64el.deb 545b88a7deff546541d6a971afa096764f522621 31120 chromium_151.0.7922.108-1~deb13u1_ppc64el-buildd.buildinfo 68bffa6a8befc1ed8f5c4af36befcf21dfc744f4 84678572 chromium_151.0.7922.108-1~deb13u1_ppc64el.deb Checksums-Sha256: 27f19f0eeaa59a79fbc3f6122bd2c4b32ffb04827e17bd503c47e2910d3e844f 5307192 chromium-common-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 368405ca57ea7e9d97661fdfa3ca38ff2273709f36ce504e1eb895b01432de67 35549744 chromium-common_151.0.7922.108-1~deb13u1_ppc64el.deb 27cb001a6f9ef9fdeb8f462faa403aeb6a80f553cb6098f2737dd892a81fbf77 31093576 chromium-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 98ce551630306790e9a0c6bd2b7c6b9ef962d1a9b016b852fabb8f1a28b32b6d 7654668 chromium-driver_151.0.7922.108-1~deb13u1_ppc64el.deb c7d8d29f470684f514438bf79fc378099a2a35f993c1e0535c1a300d64bc9cac 25483100 chromium-headless-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 811d4c72be989b5b7c1211330d2c61d7da68be96f7547844ed58edf5928620d2 62083660 chromium-headless-shell_151.0.7922.108-1~deb13u1_ppc64el.deb 3c9c740ce58d1fd67996e15d51f797307d2aec3cd1e661e6a3aea930026f751b 20392 chromium-sandbox-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 52d7953004c4ac961690b7836b33aa9ea4a2199dee4e8114a65bfa7c6b9535e1 138136 chromium-sandbox_151.0.7922.108-1~deb13u1_ppc64el.deb 34a75fe9bcb00b6ac47ac347c088937ab404bbdf888af32cef49b27096a05c99 26579244 chromium-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 30279e0a1e80127bd2ddf8aa5ddda6daf4587db3f439a45d7717d2b44e9896ab 62019008 chromium-shell_151.0.7922.108-1~deb13u1_ppc64el.deb d6d9f6af8662e7fec37c19a922ed1e985626e83a5dee0125035457b1c2b81403 31120 chromium_151.0.7922.108-1~deb13u1_ppc64el-buildd.buildinfo 23dc6ad17f7c1a3e0d7eecfda460a4180da386f947577d4c6473fa758aec424d 84678572 chromium_151.0.7922.108-1~deb13u1_ppc64el.deb Files: 6da8a04818f40ff8da473678f23c36dc 5307192 debug optional chromium-common-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 89099b8437699bc1ab1e96ceb2184004 35549744 web optional chromium-common_151.0.7922.108-1~deb13u1_ppc64el.deb 0ffcfcc413ddee7ed359b3548cacba75 31093576 debug optional chromium-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb c3295103b3cc67cb92ff30f225077699 7654668 web optional chromium-driver_151.0.7922.108-1~deb13u1_ppc64el.deb 43d15ee34683da05815ed3b779480bea 25483100 debug optional chromium-headless-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb 904bbad0d5c9bd137f9bfcc98808499d 62083660 web optional chromium-headless-shell_151.0.7922.108-1~deb13u1_ppc64el.deb c01b6e1c963e030d77aff066324421ea 20392 debug optional chromium-sandbox-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb b0c21483aabd8e2b7569b612388a7c65 138136 web optional chromium-sandbox_151.0.7922.108-1~deb13u1_ppc64el.deb e1467c294522279dea9b91ece432c1c3 26579244 debug optional chromium-shell-dbgsym_151.0.7922.108-1~deb13u1_ppc64el.deb e554fcd532026889e2463201abfeee84 62019008 web optional chromium-shell_151.0.7922.108-1~deb13u1_ppc64el.deb 9b4a204e2acd5796cb591828c7545d87 31120 web optional chromium_151.0.7922.108-1~deb13u1_ppc64el-buildd.buildinfo 27a6bed0bec23584405fcfb33513f76f 84678572 web optional chromium_151.0.7922.108-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmp30R8ACgkQ2FRWNm40 e2adIg/+LPu04j1AHJAm31pWaRp7emlAwc0KTS7hRgeDxsldTybjXiIhZEZkU3CD CAI1gsx94Y1lqmu48emmrpAn5/8I6+TUWBkFz2ozPW4dP2WjwY9YiQWRDSGzgrkY CAXvRoevqOXS0aHaySTSXj/PWaD16h8Fyt0SlrpO8EOypqUisWmvR3Hu9oFvHngC sX6S5CUR3szq+yD9FJr3i0TpQ/5UqKRMPCWig2BF7ky47BoFyBavFL7nNm29saz1 nPaOnzICN+syBBh3YFmTEGgOkgoCj2d6F+bSEYoa4iU2lH1A1KX/JL5kA7/xGZ2B CwUK9elMgPTWFmD41mNW9dl7QPh4JocdylQMZWmPqU0HwbOjmM7yiizZMw+EygYW I8KQti/rYtJGm53ou2sy0OxZq7o1MeX3ZczxQRGloGn0txX9JcmUo3Fnzb+qkq0Y DNb73fzcXayMSyB6GClQdmMtCBSiLOAKB6Q7LWKxMRjFq1IKQ+miagkRB92mTq68 /1kzMEYZwZJosgBcJDIZTrafjuTKO7m+GlZU5wDjdBVKkELfwvSugsg/7p24rEVG IBvE1uFQwexVUY1KLojSnWZpJx+8eH8MaQuYNj9McxXl1Hdq+4v2HFoMLPxuhShe 1GpQPaa4P85hov4Nycd1V00MPGEo4b0N3zqaTGLIjmn599mZmAo= =uC5D -----END PGP SIGNATURE-----