-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 17:31:48 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 154.0.8037.57-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1135653 1146746 Changes: chromium (154.0.8037.57-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-95350: Buffer overflow in ANGLE. Reported by Billy Jheng Bing Jhong, Muhammad Alifa Ramdhan, Pan Zhenpeng of STAR. - CVE-2026-95357: Out of bounds write in GPU. Reported by Anymous. - CVE-2026-95339: Use after free in ServiceWorker. Reported by Andrew Boni. - CVE-2026-95281: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd. - CVE-2026-95313: Use after free in Fullscreen. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95349: Buffer overflow in WebGL. Reported by Google. - CVE-2026-95284: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan (STARLABS SG). - CVE-2026-95322: Out of bounds write in GPU. Reported by David Sievers (@loknop). - CVE-2026-95329: Out of bounds write in WebGL. Reported by Google. - CVE-2026-95356: Use after free in WindowDialog. Reported by Xinyang Ge. - CVE-2026-95310: Use after free in AdFilter. Reported by Xinyang Ge. - CVE-2026-95301: Missing authorization in Extensions. Reported by OGINOME Tomohito. - CVE-2026-95291: UI misrepresentation in SecurityIndicators. Reported by NH DEV. - CVE-2026-95355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-95315: Use after free in Aura. Reported by Google. - CVE-2026-95298: Use after free in Browser. Reported by Google. - CVE-2026-95372: Use after free in Chromecast. Reported by Google. - CVE-2026-95324: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95283: Buffer overflow in Tint. Reported by Google. - CVE-2026-95293: Uninitialized resource in GPU. Reported by TienPA - NGS Holdings. - CVE-2026-95274: Improper output encoding in DevTools. Reported by Google. - CVE-2026-95282: Use after free in Platform. Reported by Google. - CVE-2026-95373: Use after free in DevTools. Reported by Google. - CVE-2026-95277: Use after free in Views. Reported by Google. - CVE-2026-95348: Use after free in Bluetooth. Reported by Google. - CVE-2026-95335: Use after free in HID. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95338: Use after free in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722). - CVE-2026-95318: Buffer overflow in Video. Reported by alex.laboirie. - CVE-2026-95286: Type confusion in Bindings. Reported by @bean5oup. - CVE-2026-95365: Type confusion in IndexedDB. Reported by HoneyBee. - CVE-2026-95343: Use after free in WebAudio. Reported by HoneyBee. - CVE-2026-95280: Race condition in V8. Reported by Google. - CVE-2026-95304: Out of bounds write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95306: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95299: Use after free in GPU. Reported by Google. - CVE-2026-95351: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-95287: Missing authorization in Navigation. Reported by Google - CVE-2026-95366: Use of released resource in Core. Reported by Google. - CVE-2026-95382: Improper input validation in Auth. Reported by Google. - CVE-2026-95381: Improper input validation in Printing. Reported by Google. - CVE-2026-95331: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-95297: Missing authorization in Contextual Tasks. Reported by Google. - CVE-2026-95375: Incorrect authorization in BrowserTag. Reported by Google. - CVE-2026-95302: Incorrect authorization in WebAPKs. Reported by Google. - CVE-2026-95362: Cross-site request forgery in DevTools. Reported by Google. - CVE-2026-95369: Inappropriate implementation in XML. Reported by Google - CVE-2026-95376: Externally controlled reference in DevTools. Reported by Google. - CVE-2026-95359: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95294: UI misrepresentation in Browser. Reported by Google. - CVE-2026-95337: UI misrepresentation in Messages. Reported by Google. - CVE-2026-95346: UI misrepresentation in Chromoting. Reported by Google. - CVE-2026-95320: Missing authorization in Navigation. Reported by Google - CVE-2026-95317: Incorrect authorization in MediaCapture. Reported by Google. - CVE-2026-95345: Use after free in Actor. Reported by Google. - CVE-2026-95330: Improper state validation in Downloads. Reported by Google. - CVE-2026-95370: Inappropriate implementation in NFC. Reported by Google - CVE-2026-95303: Incomplete cleanup in SmartCard. Reported by Google. - CVE-2026-95360: Race condition in Editing. Reported by Google. - CVE-2026-95295: Information leak in Mobile. Reported by Google. - CVE-2026-95276: Improper input validation in Themes. Reported by Google - CVE-2026-95314: Incorrect authorization in HID. Reported by Google. - CVE-2026-95371: Missing authorization in Views. Reported by Google. - CVE-2026-95353: Use after free in Bindings. Reported by Google. - CVE-2026-95363: UI misrepresentation in FileSystem. Reported by Google. - CVE-2026-95341: Improper input validation in Desktop. Reported by Google. - CVE-2026-95354: Use after free in Verifier. Reported by Google. - CVE-2026-95384: Race condition in Transactions Platform. Reported by Google. - CVE-2026-95336: Information leak in Transactions Platform. Reported by Google. - CVE-2026-95290: Missing authorization in NFC. Reported by Google. - CVE-2026-95325: Use after free in ANGLE. Reported by Google. - CVE-2026-95275: Incorrect reference resolution in MediaStream. Reported by Zabith Mohammed (@nmzabith). - CVE-2026-95374: Incorrect authorization in Network. Reported by NH DEV. - CVE-2026-95300: Missing authorization in DevTools. Reported by Google. - CVE-2026-95321: UI misrepresentation in Payments. Reported by jodyritonga. - CVE-2026-95323: UI misrepresentation in Chromium. Reported by Wihdatu Nuuro Ahmadi. - CVE-2026-95332: Use of uninitialized variable in Tint. Reported by Google. - CVE-2026-95312: Information leak in Passwords. Reported by Google. - CVE-2026-95344: Race condition in DevTools. Reported by @bean5oup. - CVE-2026-95289: Incorrect authorization in Scroll. Reported by Vu Van Tien (@n0_Be3r). - CVE-2026-95347: Use after free in Updater. Reported by a45hif. - CVE-2026-95311: Free of non-heap memory in Fonts. Reported by Google. - CVE-2026-95358: Incorrect authorization in Mobile. Reported by Google. - CVE-2026-95333: Use after free in Metrics. Reported by sean geofrey. - CVE-2026-95307: UI misrepresentation in ExtensionsMenu. Reported by Hafiizh. - CVE-2026-95285: Missing authorization in WebView. Reported by Google. - CVE-2026-95278: Missing authorization in WakeLock. Reported by Google. - CVE-2026-95327: Information leak in Networking. Reported by Google. - CVE-2026-95334: Incorrect reference resolution in WebProtect. Reported by Google. - CVE-2026-95308: Integer overflow in Metrics. Reported by Google. - CVE-2026-95292: Incorrect authorization in Safebrowsing. Reported by Google. - CVE-2026-95352: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95279: UI misrepresentation in Omnibox. Reported by Google. - CVE-2026-95367: Information leak in DataTransfer. Reported by Google. - CVE-2026-95385: Inappropriate implementation in PlatformIntegration. Reported by Google. - CVE-2026-95368: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95319: Use after free in Printing. Reported by Google. - CVE-2026-95326: Incomplete cleanup in Bluetooth. Reported by Google. - CVE-2026-95309: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95361: Confused deputy in DevTools. Reported by Google. - CVE-2026-95288: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95380: Type confusion in V8. Reported by Google. - CVE-2026-95342: Missing authorization in V8. Reported by Hongwei Li, Zhun Wang, Ziyue Pan, Junmin Zhu, Saastha Vasan, and Wenbo Guo. - CVE-2026-95296: Missing authorization in Core. Reported by Quyền Sơn (@zer0qs1337). - CVE-2026-95316: Unchecked return value in Performance. Reported by Google. - CVE-2026-95328: Confused deputy in Mobile. Reported by Google. - CVE-2026-95340: Incorrect authorization in PictureInPicture. Reported by Google. - CVE-2026-95364: Improper input validation in Passwords. Reported by Google. - CVE-2026-95305: UI misrepresentation in Chromoting. Reported by Google. * d/control: - remove generate-ninja build-dep. - stop recommending chromium-sandbox (closes: #1135653). * d/copyright: stop deleting tools/gn/. * d/rules: restore old code that builds the bundled version of generate-ninja as part of the chromium build. Upstream keeps using brand new gn features (sometimes not even available in sid yet) and we're carrying too many patches to work around that. * d/patches: - debianization/pre-gen.patch: rework clang argument filtering due to upstream changes. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - llvm-22/clang22.patch: refresh. - ungoogled/disable-ai.patch: sync from u-c - ungoogled/disable-mei-preload.patch: sync from u-c - ungoogled/disable-privacy-sandbox.patch: sync from u-c - fixes/crubit.patch: drop - system/rust-cbor.patch: drop - ungoogled/crubit.patch: add a patch pulled from u-c, which includes stuff from fixes/crubit.patch and system/rust-cbor.patch.. plus more. - ungoogled/verification-tokens.patch: add a patch pulled from u-c to fix a build failure related to private verification tokens. Two week release cycle is awesomesauce. - fixes/tsc-split-comp.patch: add a build fix for debian's typescript. - ungoogled/disable-ai-search-shortcuts.patch: add patch to disable the new AI button and the @gemini/@aimode shortcuts (closes: #1146746). - trixie/gn-string-hash.patch: drop, no longer needed with bundled gn. - trixie/gn-len.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-module-name.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-unused-vars.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-funcs.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - bookworm/gn-revert-path-exists.patch: drop, no longer needed with bundled gn. - bookworm/foreach.patch: drop, no longer needed with newer clang [sid, trixie]. . [ Timothy Pearson ] * d/patches/ppc64le: - fixes/fix-rust-linking.patch: refresh for upstream changes - third_party/0002-regenerate-xnn-buildgn.patch: refresh for upstream changes - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: refresh for upstream changes . [ Daniel Richard G. ] * d/deb_pre_gen.py: Handle new arg signature of generate_css_js_files.js, and the new run_with_restat.py script; also streamline regexes a bit. * d/patches: - debianization/pre-gen.patch: Handle run_with_restat.py script, and neuter run_with_stamp.py. - trixie/gn-unused-vars.patch: Refresh. * d/rules: Set njobs for the init-pre-gen target for a faster GN build. . [ Jianfeng Liu ] * d/patches: loongarch64/0020-user_agent-add-loongarch-architecture-support.patch: refresh for upstream changes Checksums-Sha1: 8feece0c43688be97f6ff02832d1ccfe0685eb7e 3102540 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 2acb6cd463e55ec8f71cb373d673d0e606931e05 35619268 chromium-common_154.0.8037.57-1~deb13u1_arm64.deb c6605cc66225b5d6988c4655b280e4c5a60c512f 33954832 chromium-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 81b6917848404b98ce0f46a15aff6180f11b93fe 7424848 chromium-driver_154.0.8037.57-1~deb13u1_arm64.deb 9de9ced910c2b87b33bbe299cd1453fbe49ef104 27548400 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 7165c08ce69db0ebc2e78c4c2fb4518bbe861384 58124688 chromium-headless-shell_154.0.8037.57-1~deb13u1_arm64.deb 734d5861213a437ce17a072b9c7885eb06253971 20956 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 9c80502e994f3b3b44cba1ee99087ab4d3c098eb 151792 chromium-sandbox_154.0.8037.57-1~deb13u1_arm64.deb 5946f5d31465e850e34b7715a093bedb37430cad 29023452 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 77bb99a041ed557fc49f6b6927fba0875facde4d 58009472 chromium-shell_154.0.8037.57-1~deb13u1_arm64.deb b84ba895e870c584eb700b6c326b1ea1b2f91499 31509 chromium_154.0.8037.57-1~deb13u1_arm64-buildd.buildinfo f0e744efbbed3e9b8d090928b5b01803c72f6faa 78706552 chromium_154.0.8037.57-1~deb13u1_arm64.deb Checksums-Sha256: 8a3b275ffdccbc05f0e3cbd7c524a836553d861875cae0273606ea6dded1d19f 3102540 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 5eecb71dd7b23e7c21dd8f1c2c68f2cf80e2f802486b7c59f5286f7a28544be6 35619268 chromium-common_154.0.8037.57-1~deb13u1_arm64.deb b2ea96bc2e583450ba6a6f0074280ef4c9e5e9963b708cb0f59c59233a867341 33954832 chromium-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 5803a2e38f423c0fb48ae4d10abb1ea5e6363e6bc71d6885922ef9b7608d2643 7424848 chromium-driver_154.0.8037.57-1~deb13u1_arm64.deb e6f524c21f5d18258452b7a0a28a5b80d52727c0a08844c723a3c0fc954cd740 27548400 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 8d5563cf6b1cdde59767c54ffdde401266e9137d4e62bad5518fb1a59d50cbf8 58124688 chromium-headless-shell_154.0.8037.57-1~deb13u1_arm64.deb 0b88091eceb49a093530bc67166a30004f9912ae1f12c5014dae725288d5f12b 20956 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 7bbb9408c8f28050f45f484c90a1c2472f816543be20274b6c98779392a7847f 151792 chromium-sandbox_154.0.8037.57-1~deb13u1_arm64.deb f9a86e8d71cc27a9ed28870397f09e07d3bf6a7768a4f230292aeb6dc57e10f0 29023452 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 21d3ce28ed99cb93e88e3b19655ad38a43a8834821a6f2ac668be9f6839ab186 58009472 chromium-shell_154.0.8037.57-1~deb13u1_arm64.deb 7c4dbf10fb0f3faa15b59f412ce7680fd314ea5f8c44d19f69279f0468b10dd9 31509 chromium_154.0.8037.57-1~deb13u1_arm64-buildd.buildinfo df210b1e57d974003c50f0c38298e0841dba63053b392653aa60bd34d168bed0 78706552 chromium_154.0.8037.57-1~deb13u1_arm64.deb Files: 447c5231d3e2863dc10a357850fc498c 3102540 debug optional chromium-common-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb c2f7e74436d937d2c16d528be378ecbb 35619268 web optional chromium-common_154.0.8037.57-1~deb13u1_arm64.deb 8fe98756d099f193ff38be6686a2cdb3 33954832 debug optional chromium-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb cddd98932adde52fdd668b142fa9d21f 7424848 web optional chromium-driver_154.0.8037.57-1~deb13u1_arm64.deb 779443e9128474e4960b5c906a60ab2f 27548400 debug optional chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 434c23165a9be469054b955b2fd5f783 58124688 web optional chromium-headless-shell_154.0.8037.57-1~deb13u1_arm64.deb ac853372969bd157a2a7a64810f80102 20956 debug optional chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb c5442e44db59ea81b8c7ee82fdf759da 151792 web optional chromium-sandbox_154.0.8037.57-1~deb13u1_arm64.deb 516e88578ef91ec4df56a00ea4228136 29023452 debug optional chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_arm64.deb 2a905b4656c3584a17de00e5826f0481 58009472 web optional chromium-shell_154.0.8037.57-1~deb13u1_arm64.deb 6cf64ed64d7a14d1a9f09c8e19e095cd 31509 web optional chromium_154.0.8037.57-1~deb13u1_arm64-buildd.buildinfo 7a0473190557cdfea652770755764e23 78706552 web optional chromium_154.0.8037.57-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmq2x1wACgkQvzDqKQSG l8XcgA//ejJ4KfgrqzQgvQRGn3StQXQrhpAUMP1uQvPSRiQzhp1qSB73ha2XUOWI Lx7uOzedueSLdsDA/lu2tjCVIM5LT/lSzy8+PPwTkd1xmxUKh2fl9XCT0qOimsNs hlKdjqL29tJ3JCmX+GAfN4lMnjpgrjI5I3M4vE9SNHsWmu19ET39KoHAGEPjc5TE fT/cjOhiyU/stBKGXMJVCMs2SbDqeW/EkULnWlvZ1iOjUclK8W4wAfG65se/qhCW vJYU3VODjxv7R/14urSJKPFQgEWm95RELmCGVvu3EAVb2levATFmJH6hJdS9yr8D WGxccfp54Ba60yJ7aS+G55AwJnmkvaBg4rzbW69/Cg7C7C+MIlMh3qnwr5Esm7gR Mhd4m4uUMudEP5SOvklq0EA++gTLFqp/eo6u2uBDFrEWhC8TiO7ZaZGwZaPo4VYh W2KLhuvII8Zfls2iSRsACOr/bAlCqU6y0nljhen1jSu0yvhm1KLL+p0eedeuexso hWnh3/1TjQfwdp/WPuuJ5hZinqZBUd4ueXG1w3RZk9QoQ+3l5Wqc+p6xFrFCaCny dpa0ZcHTFDGD2pW8gLYzHqwLMqX6HT6slmK1iSTnpWLRru7YlJ/84jgrr/Cbk8Un ZVshntCZiexu4rfPQDxt6QPdavtTfSgEHkoh1KAR5W4bH3G3i+A= =qIjf -----END PGP SIGNATURE-----