-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 17:13:29 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 155.0.8059.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (155.0.8059.79-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * d/patches/debianization/strip-rlibs.patch: drop, it didn't actually help with armhf builds crashing with OOM. * New upstream security release. - CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-110149: Use after free in Browser. Reported by Google. - CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110161: Use after free in Network. Reported by Google. - CVE-2026-110165: Use after free in Core. Reported by Google. - CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110162: Use after free in Desktop. Reported by Findingz. - CVE-2026-110170: Use after free in Bindings. Reported by Google. - CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google. - CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google. - CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin. - CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google. - CVE-2026-110137: Use after free in WebRTC. Reported by Google. - CVE-2026-110140: Type confusion in V8. Reported by Google. - CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security. - CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa. - CVE-2026-110153: Use after free in Media. Reported by xinyang. - CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy). - CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude. - CVE-2026-110168: Use after free in V8. Reported by Google. - CVE-2026-110139: Use after free in Media. Reported by weihengqiuu. - CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110141: Observable discrepancy in Media. Reported by Google. - CVE-2026-110138: Use after free in ShapeDetection. Reported by Google. - CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge. - CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge. - CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni. . [ Timothy Pearson] * d/patches/ppc64le: - sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Fix syscall execution go/no-go test logic error Checksums-Sha1: 2be258505c71b17abb7b885a06641e4a4713fe59 4202192 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb b5d608bbfaf98ef757923baec222c09c25da37a5 31329836 chromium-common_155.0.8059.79-1~deb13u1_amd64.deb 5d45639bd600da3e4641282df9ad9e32279527ea 34295116 chromium-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 4f23d1ea6f328dc23f71b61409524d3cf2b61d24 8487164 chromium-driver_155.0.8059.79-1~deb13u1_amd64.deb c4b7d3b04059b14473b9ff3da75c701024427499 29263364 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 9365548a5fb99ca0ca5554e0ba69c22be9392772 69122068 chromium-headless-shell_155.0.8059.79-1~deb13u1_amd64.deb ec5e84590f3b3fb8e54adbc1bf28b11a933293e4 20360 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb ebfbd0f0f52297ded3858d08a478c690991c7bd9 155952 chromium-sandbox_155.0.8059.79-1~deb13u1_amd64.deb b5ee63d2c682cffbc4a0c781c9dabe55314e2946 30379148 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 4865310dd37311b23f53a419cc2faa3dcf631d88 66732992 chromium-shell_155.0.8059.79-1~deb13u1_amd64.deb e970fed2a78818b1563913c7b2849b7bfde9c33c 31471 chromium_155.0.8059.79-1~deb13u1_amd64-buildd.buildinfo 6d886e844f568aecfb9fa7e54083d14e160319e7 91274804 chromium_155.0.8059.79-1~deb13u1_amd64.deb Checksums-Sha256: 5d4cbac09eb2e726cdc037d3910799cb76a9138cdafea437d4d6096b4ea7e855 4202192 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 3ea439a3991cac4ebc9741484bf93f848327bdd413b78853bb025454f419f9a6 31329836 chromium-common_155.0.8059.79-1~deb13u1_amd64.deb fe173130cf42aa3136b75905825245dedddaccda585e741e904c47cc4e076ad2 34295116 chromium-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb b8f0b81d22aca80b44426a93c8d0eafbb0c6d81029859f3b7e8e5b3bdeb5b0ec 8487164 chromium-driver_155.0.8059.79-1~deb13u1_amd64.deb f34d12395fce3fa53bcfc7bbe4d82437581150a4c40fb494a766087d24db2f5c 29263364 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 993ee9e416935b8f1d7e02fe2bf204dec0e770c4e3fd89c88451cfdc6699fb84 69122068 chromium-headless-shell_155.0.8059.79-1~deb13u1_amd64.deb d13339e8b62628a50e4fd90b5d1216a2097351ad44ec029f59d09cfcb7cdf0a7 20360 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb bb75abb86bf3f7f8b89d492176b67ad3d0439da58566107e0d8fa0827b7e3e52 155952 chromium-sandbox_155.0.8059.79-1~deb13u1_amd64.deb 0c26e19d1218c4233de2ab1cdfd1f2598bf389c3906f1e745950eb40ad61bc97 30379148 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb f6c85ac91c3035ed2ae9647ea05cae324bc51b894ea704241e98a1bac660ff4e 66732992 chromium-shell_155.0.8059.79-1~deb13u1_amd64.deb 0cd0bce1f7350018cba45d0a3ee8ec1aecacfb90e0c1134ec43c08e45eb95141 31471 chromium_155.0.8059.79-1~deb13u1_amd64-buildd.buildinfo f52c20eb7eec8f52e421f2384c0ef1920aacea92967e289ba1838570fa6bbcac 91274804 chromium_155.0.8059.79-1~deb13u1_amd64.deb Files: a477a1da980cc159864a7607abf989c0 4202192 debug optional chromium-common-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 76911983e318dc2d91137b52d8be808a 31329836 web optional chromium-common_155.0.8059.79-1~deb13u1_amd64.deb 56a76120d408849fb77e364a861d6e4c 34295116 debug optional chromium-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb ab6b88b0d6ea46a3ff1f0572ff03d6a4 8487164 web optional chromium-driver_155.0.8059.79-1~deb13u1_amd64.deb 4ecd8efe927afaad8c2a849194a30847 29263364 debug optional chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb b1eef4ed17e5a481f8acbd8a1d5cd905 69122068 web optional chromium-headless-shell_155.0.8059.79-1~deb13u1_amd64.deb 72e4f155b4c340ece61ffcbb7314ea5e 20360 debug optional chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 3926bd978473655a0f05bec6d77e7ada 155952 web optional chromium-sandbox_155.0.8059.79-1~deb13u1_amd64.deb 975299bd6abe2689c3cea1d685cd9d8f 30379148 debug optional chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_amd64.deb 1bf984e00f46df7f0fe12f46f5056418 66732992 web optional chromium-shell_155.0.8059.79-1~deb13u1_amd64.deb 7fd0d394008b2c954d63f2f413a90700 31471 web optional chromium_155.0.8059.79-1~deb13u1_amd64-buildd.buildinfo db4c16dde87fb390d831477048b0cd84 91274804 web optional chromium_155.0.8059.79-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmrQ+GsACgkQYg9P9sm2 dfHThA/9E/upKEHUFaekXSBT6Hsjny81t3uObbNPpSkeFYTVWgbuaHtmSBFffZ9q pPRZTne6GgzJ1752VifoeEwHk5rLHFHHUg9mwbdcxIcuQttAUnhDCnqnyTOwLyav NErjO0ZBEvE4tcIdKO+tMI3NOBGelF8SvkaLCdx/TKnsiMCwfQQcH9J6Xxn11wxO zgsSKmC+BweB9Fb1gCwvNbAccmEvQJq7rR4STLg1GMl23BwaD7M5MRXTNYSltCQE o4kqLqEzv6uJfd+y6qbJQ5BFyTDDSb89havcNs48xy4J9VtYLYLbVMKKtq2Y/Z3T tGAA9Wtuu1vD0m5zONVKdBPqI/vVdKqOI0kYibLHYLawjhw1Hh+pgD2W9sLDl+CE RXPz4vHZLcoHNHJv7E/MVZFt8ZVnImISIb0I9/isVWpkt0eAifFkc6QiNivDLfZm qmt890zjoiqXef8VRNi24Mqdg3ykLvIq+8XHitGTKu27A4wEIAIg0nZ5zP1dHG5Q Y2K0QiFBdrVEA3G4DW1b8W2noX8vPACDqXpICF7T6fq6DzEQq1iGiYYjSK5vD+lv vFnZGnrgMZROmsxRo/9l6+vd959BA985aTNsYtLc3+6UUfpS60WQWjrdCpihG3fq KdLuj2RGxp2/Bft9zFs7jlNpgAwl1pPOvo7jTw6hgjH40HPQhX4= =+vZO -----END PGP SIGNATURE-----