-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 23 Jun 2026 20:40:58 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 149.0.7827.196-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (149.0.7827.196-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-13028: Use after free in WebGL. Reported by anonymous.
     - CVE-2026-13032: Use after free in WebGL. Reported by Google.
     - CVE-2026-13033: Out of bounds read in Blink>InterestGroups.
       Reported by Google.
     - CVE-2026-13038: Use after free in Autofill. Reported by Google.
     - CVE-2026-13021: Inappropriate implementation in
       DeviceBoundSessionCredentials. Reported by Google.
     - CVE-2026-13022: Inappropriate implementation in Autofill.
       Reported by Google.
     - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google.
     - CVE-2026-13024: Insufficient validation of untrusted input in
       Navigation. Reported by Google.
     - CVE-2026-13025: Insufficient validation of untrusted input in DevTools.
       Reported by Google.
     - CVE-2026-13026: Use after free in Digital Credentials.
       Reported by Google.
     - CVE-2026-13027: Use after free in FileSystem. Reported by Google.
     - CVE-2026-13029: Use after free in Web Authentication. Reported by Google
     - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google.
     - CVE-2026-13031: Use after free in Blink. Reported by Google.
     - CVE-2026-13034: Inappropriate implementation in Passwords.
       Reported by Google.
     - CVE-2026-13035: Use after free in Bluetooth. Reported by Google.
     - CVE-2026-13036: Use after free in Blink. Reported by Google.
     - CVE-2026-13037: Use after free in WebView. Reported by Google.
Checksums-Sha1:
 61c624644e7f1734a5a5e98242376b405300907b 8936844 chromium-l10n_149.0.7827.196-1~deb12u1_all.deb
 d6e9f904a75ef22e0d18e558c0f3a89007285e5d 26986 chromium_149.0.7827.196-1~deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 e0bbd20a5bc97bd4cc8c7cea2c53318ea78d4564dff7f955c0d962da318105fd 8936844 chromium-l10n_149.0.7827.196-1~deb12u1_all.deb
 a3bbbe0d5c7592abc79fd224bfc35795416c14d35764876a3dd10c9df8712d2f 26986 chromium_149.0.7827.196-1~deb12u1_all-buildd.buildinfo
Files:
 10a703dc1550ef392a8899c8b8012a96 8936844 localization optional chromium-l10n_149.0.7827.196-1~deb12u1_all.deb
 3dcf50621d95aa3371875b596055f37d 26986 web optional chromium_149.0.7827.196-1~deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=uj01
-----END PGP SIGNATURE-----