-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 14 Jul 2026 23:16:33 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: amd64
Version: 150.0.7871.124-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (150.0.7871.124-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-15764: Use after free in Ozone. Reported by Google.
     - CVE-2026-15765: Use after free in Ozone. Reported by Google.
     - CVE-2026-15766: Uninitialized Use in Skia. Reported by Google.
     - CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google.
     - CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas.
       Reported by Google.
     - CVE-2026-15769: Insufficient validation of untrusted input in
       Linux Toolkit Theming. Reported by Google.
     - CVE-2026-15770: Uninitialized Use in V8. Reported by Google.
     - CVE-2026-15771: Insufficient validation of untrusted input in Media.
       Reported by Google.
     - CVE-2026-15772: Use after free in GPU. Reported by Google.
     - CVE-2026-15773: Use after free in Core.
       Reported by xinchaotian of Microsoft.
     - CVE-2026-15774: Use after free in Skia. Reported by Google.
     - CVE-2026-15775: Insufficient policy enforcement in V8.
       Reported by wang1r923096443@gmail.com.
     - CVE-2026-15776: Type Confusion in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-15777: Use after free in UI. Reported by Google.
     - CVE-2026-15778: Insufficient validation of untrusted input in
       Navigation. Reported by Google.
   * d/patches/upstream/libyuv-loongarch-fix-row_lsx.cc-and-row_lasx.cc.patch:
     drop, merged upstream.
Checksums-Sha1:
 bbc524d63448e5caa03d3f278cd7ad494ebf49fb 5208208 chromium-common-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 99d272b47efe136d78c9f6c2d103f5cc5eb8b4d3 26684644 chromium-common_150.0.7871.124-1~deb13u1_amd64.deb
 2920e5247578064cc85c129211a9c2b5e4d1c0f4 33870784 chromium-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 1add6b6ccf16d0f10288a996c415f03cfb359183 8025020 chromium-driver_150.0.7871.124-1~deb13u1_amd64.deb
 a0879314caa83c5f1deb1004f681d3b8cb986225 28610396 chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 b69edb6e6e64746eb6ef2251d512f591e5d3829a 64262160 chromium-headless-shell_150.0.7871.124-1~deb13u1_amd64.deb
 f2fa0eed88ec108066e88a0b0c893931cd8ce022 20236 chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 04e0f95904f2e39db88b95c0e6e91d161b1f7bc6 132004 chromium-sandbox_150.0.7871.124-1~deb13u1_amd64.deb
 7a36f8ae7f07e62e6d424ad2648a81a43fa38713 30281144 chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 8389124f478c6563e9c3932c9fa4146a93577074 63949640 chromium-shell_150.0.7871.124-1~deb13u1_amd64.deb
 70def1411b9a32b27a0010328d1cdf92785689a8 30953 chromium_150.0.7871.124-1~deb13u1_amd64-buildd.buildinfo
 311fff89ab8d396e6fec6d9921e216bf28c11179 87230720 chromium_150.0.7871.124-1~deb13u1_amd64.deb
Checksums-Sha256:
 7fb1692ea3c46e8a215377ea158ec4fac4dcbdd770f4ee74a9f7eb7c949e962d 5208208 chromium-common-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 7f946bf4c17753a627babaeda38f308f8b0a74bc7a6d15aae82fcfb99e50cfe3 26684644 chromium-common_150.0.7871.124-1~deb13u1_amd64.deb
 b5a8bd37ff9363ff9efdc4c3fdca77b14363eb2ec649e402f4c0ecf990a31573 33870784 chromium-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 1150a49e77f2cfa4cab2fc69c492a406f548a212cd32ab880640a8d34aad96f2 8025020 chromium-driver_150.0.7871.124-1~deb13u1_amd64.deb
 e4a1d3d3245050bbd82b3910309bb94eb249c01784e07049a77a03537587be57 28610396 chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 b9fd0a477e55014a0ee0d34070fc1f2475549be66b1e0eea88219b38d129b0fb 64262160 chromium-headless-shell_150.0.7871.124-1~deb13u1_amd64.deb
 9d03e6002aeb406843b409d4ffb8170564ddf6cdde19a1584243e53e0f770f84 20236 chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 cae886ad357273dc7ba70c4d7c92f49b00fde98dd9bb56795831b7be8fa13e66 132004 chromium-sandbox_150.0.7871.124-1~deb13u1_amd64.deb
 2cf76fa3804d652dff478118eaf7dfc788cfade6977872ddb5b37e9db90db7a1 30281144 chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 c78da14e99a8a83cd3555f92f8cedf41e73a1c6059fe63940cbae0c60ce6d984 63949640 chromium-shell_150.0.7871.124-1~deb13u1_amd64.deb
 bcbee867a4590cfe7478118ff64ff4c4a0d60fd200c593a4938c8feeac163996 30953 chromium_150.0.7871.124-1~deb13u1_amd64-buildd.buildinfo
 834bc56b49d763a18a949a08f41495d0e0a7ddd76a7c73246fd6eddd2d6f9d1d 87230720 chromium_150.0.7871.124-1~deb13u1_amd64.deb
Files:
 7c8f218cc99a8646ccaa12b5e69fc7a7 5208208 debug optional chromium-common-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 464f4f4ba4f5d59a1115f4ed66c1576e 26684644 web optional chromium-common_150.0.7871.124-1~deb13u1_amd64.deb
 b793176b77c20d7080981a9674d57c3b 33870784 debug optional chromium-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 ca1abd855ffbe2c40635fecc9c95c578 8025020 web optional chromium-driver_150.0.7871.124-1~deb13u1_amd64.deb
 43bc6df471c0e3286848feada693b0bd 28610396 debug optional chromium-headless-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 3acad092d686294a1d6d55b2f482811f 64262160 web optional chromium-headless-shell_150.0.7871.124-1~deb13u1_amd64.deb
 8aefa6691c73be71550b9a11ae5ed551 20236 debug optional chromium-sandbox-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 9fe335e4cef9f71e0b752a3d700cf0f4 132004 web optional chromium-sandbox_150.0.7871.124-1~deb13u1_amd64.deb
 6926a7c3d3351abc810123c8c17e9df9 30281144 debug optional chromium-shell-dbgsym_150.0.7871.124-1~deb13u1_amd64.deb
 d022e801d54fae74d7271b7ebcc32e06 63949640 web optional chromium-shell_150.0.7871.124-1~deb13u1_amd64.deb
 77a757ecab679bf9974274853aadfa5d 30953 web optional chromium_150.0.7871.124-1~deb13u1_amd64-buildd.buildinfo
 e45d7099ac2ed3b383070be3fbf723aa 87230720 web optional chromium_150.0.7871.124-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmpYMFgACgkQbheoBegw
XLJibRAArUxfcd3QgsW55KU8fP+6SP7WvdI3IgY10kr1tPOQVTxqgcAquAkKYa41
t9hIM/NzlZEz+zII9f35DIX2GZgRYS487gNRW0A3Oj1TkjaeHWccQDXjpYMC5ulR
NwlNMwvrggY9fvcJ+qzepr3Pqn5U94LoXpqNx1l+kfQ2wHCSAdtc/Mua/RSjZyav
+Nya5Epq8n5WYaIUemP6w+uYiS7ap8fahVr/ZzpC0tJNvZ574DpNBqaEX2V+47b/
57qyk72r00++B/4gI74LVJBrVfoGt49QEHP8yKpbJ+pfGRo51LlRdfiW3j+5QxXg
+JlpTeCn+BUpwsHTt6PLHbo3SvCTX6Is2AyEkGwKq/H/FmHZ2WimdFyt6D+IKryd
RkSDATsi/832XfkoV4ddY/NgpXbg6JDIBkz64viUXx4vR9D+xVKcvhx39oPjDns+
mq/sAHOrmen2kjnlTbdbWm8Ko+ZZ/eWsR0tg3SxyKTc7MnCjAzYtcTjDZGvwr47q
eJtYvcpidMJFHSjl1+s7/CdHi4zpasA1xXZUZAvXHLzDlOuCu5nL0XXgFYM+wTBj
hDLSUUg0VY/zZD08MTox4DunB9IKtICkToRfTAgjJxoAIlQ2T+3JbdMwHZOvI8iS
78FtSTSXcA+Ec8I2n9IG63qce3bfydBEC+UlBCIZ9zlLitiXJlU=
=qINi
-----END PGP SIGNATURE-----
