-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 01:14:44 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 149.0.7827.155-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.155-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12437: Use after free in WebShare. Reported by Google. - CVE-2026-12438: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12439: Use after free in Digital Credentials. Reported by Google. - CVE-2026-12440: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12441: Use after free in File Input. Reported by Google. - CVE-2026-12442: Use after free in Passwords. Reported by Google. - CVE-2026-12443: Use after free in Web Authentication. Reported by Google - CVE-2026-12444: Out of bounds read in Chromoting. Reported by Google. - CVE-2026-12445: Use after free in Extensions. Reported by Google. - CVE-2026-12446: Insufficient data validation in Passwords. Reported by Google. - CVE-2026-12447: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12448: Inappropriate implementation in WebView. Reported by Google. - CVE-2026-12449: Use after free in Chromoting. Reported by Google. - CVE-2026-12450: Inappropriate implementation in Media. Reported by Zhixin Tu. - CVE-2026-12451: Use after free in DigitalCredentials. Reported by Google - CVE-2026-12452: Use after free in Downloads. Reported by Google. - CVE-2026-12453: Insufficient validation of untrusted input in Input. Reported by Google. - CVE-2026-12454: Race in Safe Browsing. Reported by Google. - CVE-2026-12455: Use after free in Tab Strip. Reported by Google. - CVE-2026-12456: Insufficient validation of untrusted input in Extensions. Reported by Google. - CVE-2026-12457: Insufficient data validation in Extensions. Reported by Google. - CVE-2026-12458: Incorrect security UI in Passwords. Reported by Google. - CVE-2026-12459: Inappropriate implementation in Serial. Reported by Google. - CVE-2026-12460: Insufficient policy enforcement in File System Access. Reported by Google. - CVE-2026-12461: Out of bounds read in WebRTC. Reported by Google. - CVE-2026-12462: Use after free in Media. Reported by Google. - CVE-2026-12463: Inappropriate implementation in Views. Reported by Google. - CVE-2026-12464: Use after free in Browser. Reported by Google. - CVE-2026-12465: Insufficient validation of untrusted input in Metrics. Reported by Google. - CVE-2026-12466: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-12467: Use after free in Extensions. Reported by Google. - CVE-2026-12468: Inappropriate implementation in Updater. Reported by Google. - CVE-2026-12469: Uninitialized Use in GPU. Reported by Google. Checksums-Sha1: 1c2c8a7a5ef7388a60f97cc553d87c7e2ee6f963 5795864 chromium-common-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 413bcff7e3aefd40524a2ee64778e1b08823d598 26048752 chromium-common_149.0.7827.155-1~deb12u1_armhf.deb 944f8a1ec0fb4772e3bab5ce63c00314da13dfa7 35499504 chromium-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 254ad7293459fec855328cd06898e88d1b4521cb 7381204 chromium-driver_149.0.7827.155-1~deb12u1_armhf.deb 9bc6943af4b0a71e1681d211b47c22896fcd326d 27543824 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 6b0e2d698344f286ca7d5afd486788742400f54f 54978680 chromium-headless-shell_149.0.7827.155-1~deb12u1_armhf.deb 855f589f31203b866ef38858882264fc8c25a754 18012 chromium-sandbox-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 1c686cf47482949d64a0268102b981ba1484c4bc 127624 chromium-sandbox_149.0.7827.155-1~deb12u1_armhf.deb 5a797f0913a40b748415afe7fafdd52967f18967 30014232 chromium-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb d1956b958dbd8772a7f6eff4168f291de07adb3c 60392376 chromium-shell_149.0.7827.155-1~deb12u1_armhf.deb 8fd32afdd009ecfda87245f909a63dfae6c10d98 30387 chromium_149.0.7827.155-1~deb12u1_armhf-buildd.buildinfo fb69db057097ac580bca8c6e439ddfc3eb949d2a 71946088 chromium_149.0.7827.155-1~deb12u1_armhf.deb Checksums-Sha256: 2e16b0fecfae4014ce6f89e2e044e50cf4d3d60d61f9f933c8aea041d46d1309 5795864 chromium-common-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 7ff9ecc27269bb966b42060a67be6c9425d3bbd008c18aceeabec202fe3947d4 26048752 chromium-common_149.0.7827.155-1~deb12u1_armhf.deb 28033860042e58901cf392e9fd7ddfe07eb4500998b3148216017cb333f57fb8 35499504 chromium-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 3be6f02be43fd8739db49a24af73d6e17278cd6b2febc2b3bab0c712b5df4736 7381204 chromium-driver_149.0.7827.155-1~deb12u1_armhf.deb e5b6b3e3f914c069ff08a4dc69f92928c53bcbada69091b84a2c0562ce7f267b 27543824 chromium-headless-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 800eee58833ea7d496410f879f09f8e4da7a63c395d02829693ee8a659bb6bce 54978680 chromium-headless-shell_149.0.7827.155-1~deb12u1_armhf.deb 6ee56cc48a58ad8495f0961c968670bfed6647ecc6bd5d8b2bb54d6018be05c6 18012 chromium-sandbox-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 1322785a5622f1180e4c6e3f8ceece1b070e4f66cb85e7975786638fdb84d6ba 127624 chromium-sandbox_149.0.7827.155-1~deb12u1_armhf.deb 6b47e54854108c10f3414ba766874f0bc994b6ec73b6f8aa111652462c902cec 30014232 chromium-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb b61f3e90ad93ba35639681980206ffec7aedb8520b0dea6add9b041af1ec9931 60392376 chromium-shell_149.0.7827.155-1~deb12u1_armhf.deb 7868a0851212b0a5ac546307901581a8800d1fbec1ac1fb662bc5753fdaae6d3 30387 chromium_149.0.7827.155-1~deb12u1_armhf-buildd.buildinfo 054f2f3222165399ea925808d2f57c04fe2f0ee18efc5d3407c7186828e913d9 71946088 chromium_149.0.7827.155-1~deb12u1_armhf.deb Files: fa3f65631be065344f7e121e660267a6 5795864 debug optional chromium-common-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 37247e92cd4a3523913e33e6b806b294 26048752 web optional chromium-common_149.0.7827.155-1~deb12u1_armhf.deb 7ea9b707dd169b0c6f429ccb4fef6f53 35499504 debug optional chromium-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb c99c4f4315c3e2c35c3266b9a0c3e678 7381204 web optional chromium-driver_149.0.7827.155-1~deb12u1_armhf.deb 5d09ea3e7ec7c68b38447bb752bc7155 27543824 debug optional chromium-headless-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 6736ca2011655a3c6f7ae4af3bec58ae 54978680 web optional chromium-headless-shell_149.0.7827.155-1~deb12u1_armhf.deb 70a01f0c290d2c914d29c59ad6f50bcb 18012 debug optional chromium-sandbox-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 385a831f3f9b28c20f5e5e163d6ef764 127624 web optional chromium-sandbox_149.0.7827.155-1~deb12u1_armhf.deb e0c5fb74bed1348a00a43eeb50512b05 30014232 debug optional chromium-shell-dbgsym_149.0.7827.155-1~deb12u1_armhf.deb 09cd8a3cbb1c723c4cdd1a1dfe4ce5b1 60392376 web optional chromium-shell_149.0.7827.155-1~deb12u1_armhf.deb 18c6192580b31c15777e41891f094ca2 30387 web optional chromium_149.0.7827.155-1~deb12u1_armhf-buildd.buildinfo 3ce6aa5c9a6809668893ab8a746aa93c 71946088 web optional chromium_149.0.7827.155-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmo0jOoACgkQK1PZBedP spp9fRAAi60oqkMnWpj/1Op6EEiWretYS+Xj5FrECKfLL3ISXxPWwV33PEROMApb QxlPd1aygCtx+8D6zcKnVsQErChGDd+D5OETmi4k7cQ0Hwob86hBYX0y8yBGiKrV 40kdxxPwh4FiP5PLMxeLebng1AWSGzlsl72SmC893lXSqB8AqKqWlo0QYrHuR9lk 77NIS672vtQfYi2ljgw3dU88fFR56KjoyfQUzjxgJjef7/+9IiHNfdaU5Ks6bVyg ViWZfvA59YrV5MNF1llxHP1icTYJspRYn6LmeJnL2665W7Zp3xyITkFitPONfC5N FqoRGW5NlygYMLwIhZPZ5dMLqiV4eKu3U2o0WvFqwIMGE5ErnbPYqIKgeUlw1A90 kA8GyIyZUzxP3BVZqIljDE3bl4n3OmvMZg1Pmv5trFaAqOo7XdfD0Qt1uD1ggx5E JmX2s3iLbp8PZSW0cdJJ0nTfG6VhfWp+o1yFuh7BNrh6TCp43cCDI/lRJ8HvVuJX AU8ojEPFEoJvvq14pIUF9YPWID6boPWfT1z3PkDmEVDws+5Gw0VQNpJuuAN7Vt5T BT8rExW10Z6dED4nIbUfRxDKi1VGxMaGlPkBVXKmk1SE/qQ0UCcD+HUQz/JNkNcr aVjVoEkhePKZZ4P1+zLeB02piHpd0eqQHTNVmSEXumQY02A/KA8= =k8o5 -----END PGP SIGNATURE-----