-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 17:13:29 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 155.0.8059.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (155.0.8059.79-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * d/patches/debianization/strip-rlibs.patch: drop, it didn't actually help with armhf builds crashing with OOM. * New upstream security release. - CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-110149: Use after free in Browser. Reported by Google. - CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110161: Use after free in Network. Reported by Google. - CVE-2026-110165: Use after free in Core. Reported by Google. - CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110162: Use after free in Desktop. Reported by Findingz. - CVE-2026-110170: Use after free in Bindings. Reported by Google. - CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google. - CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google. - CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin. - CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google. - CVE-2026-110137: Use after free in WebRTC. Reported by Google. - CVE-2026-110140: Type confusion in V8. Reported by Google. - CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security. - CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa. - CVE-2026-110153: Use after free in Media. Reported by xinyang. - CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy). - CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude. - CVE-2026-110168: Use after free in V8. Reported by Google. - CVE-2026-110139: Use after free in Media. Reported by weihengqiuu. - CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110141: Observable discrepancy in Media. Reported by Google. - CVE-2026-110138: Use after free in ShapeDetection. Reported by Google. - CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge. - CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge. - CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni. . [ Timothy Pearson] * d/patches/ppc64le: - sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Fix syscall execution go/no-go test logic error Checksums-Sha1: 7fa9b75a30d21709a71ba3ae04798e0ed5831f1b 4985932 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 92a637b4101d62598e5163521aa703dde82fd7e4 36302732 chromium-common_155.0.8059.79-1~deb13u1_arm64.deb 2ab7cfe4402f3ec71d36e7f7c6c0a4f1fa6f4f6e 35886156 chromium-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb ce0f0cc79181c6089463c07fc270db66b3f96bfd 7440368 chromium-driver_155.0.8059.79-1~deb13u1_arm64.deb eed157539d98886bb6e9ce7895dd989556a8cca2 30106524 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 881212e1d77c587e5d0bc65418fbd8b04fb276d6 60574844 chromium-headless-shell_155.0.8059.79-1~deb13u1_arm64.deb 59f3cd3c06e81029c1ec02d5c83b825aa6c61b4c 21148 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 3b485cb8082a2ccb85126e435b4ed8cdf25fb340 156684 chromium-sandbox_155.0.8059.79-1~deb13u1_arm64.deb b0da8146fcf4d0f9b7a58d93c6771e19af5103fe 31029884 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 3e96b04bddf9f286f84c7e56b25ddbbad16086a0 58740700 chromium-shell_155.0.8059.79-1~deb13u1_arm64.deb d76177ac26fab31b5eb5e373967680019ea7aeda 31509 chromium_155.0.8059.79-1~deb13u1_arm64-buildd.buildinfo a6d4ce9c7696ec0f05b7f2442fb31192fc6f6241 79116104 chromium_155.0.8059.79-1~deb13u1_arm64.deb Checksums-Sha256: 4c28f4c1e26f062220455cb6654ca87e9c79cb5f9a5fccc47de15eecf8080b35 4985932 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 2f8d97e652adc2afa8cc96f79141ffdff0ca4f11c3a35671e7b61f60d10eb2b5 36302732 chromium-common_155.0.8059.79-1~deb13u1_arm64.deb 6b67c49772a33690168fa9eb9d7abd733ed537971e651d1228b3e9eb9678a7d4 35886156 chromium-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb b64fadbecf172bed26125b5e94c4f1d68a86e43a55d484e290e4a3c3fdd6103e 7440368 chromium-driver_155.0.8059.79-1~deb13u1_arm64.deb cf39cd33c1fabf4c41d1c01dda368059074255d6b4972dbf9058f467523b7598 30106524 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 62844a3b6e2b349c948bce26eeeafeff79e2e57265818787a1795ebee4607dcf 60574844 chromium-headless-shell_155.0.8059.79-1~deb13u1_arm64.deb b219cb9ea25bd723ee9faa8beefcc503ffdcc5b406429b8f65ec04093a5b6499 21148 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 37670b391e0a5cb00cefbb62b92476d65f44887aca14fd8ef5348bdfa14cd128 156684 chromium-sandbox_155.0.8059.79-1~deb13u1_arm64.deb e0e290d6c6cb59e6aa5f583d50c5f9b57e00827427de35064d0db406fc2c7db6 31029884 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 9521fa442697d606e72626ccd98fa745a2f1f10e584db319da8e3a71d4720293 58740700 chromium-shell_155.0.8059.79-1~deb13u1_arm64.deb 624c76d285da19a4fae65596f7b705ada6f60b185884da54ef53cedd07527890 31509 chromium_155.0.8059.79-1~deb13u1_arm64-buildd.buildinfo bb4334a065801d7482df4783b535ab16654fb71e6eac8a89bd49eb2e7082be27 79116104 chromium_155.0.8059.79-1~deb13u1_arm64.deb Files: 6982b3178b9b0e65e2b1d03a4cc77338 4985932 debug optional chromium-common-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 0736ec5d4c7a65a3f3b28bb8f5b1b054 36302732 web optional chromium-common_155.0.8059.79-1~deb13u1_arm64.deb ccc7ea450e255c42e82f932509a529ee 35886156 debug optional chromium-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 0fa159223c0418e299195c7cc1ff1a5c 7440368 web optional chromium-driver_155.0.8059.79-1~deb13u1_arm64.deb 9d5fd6abe4912cecb1e0ebc4fabb4f6a 30106524 debug optional chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb f33223de9140b6664e7c1972002cfed4 60574844 web optional chromium-headless-shell_155.0.8059.79-1~deb13u1_arm64.deb c49e216cb7ff60c54a0ceb76efb77b1b 21148 debug optional chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb 9957adb3fe474598d7018e82422380d1 156684 web optional chromium-sandbox_155.0.8059.79-1~deb13u1_arm64.deb eb132fd98e3b6b43fe82d9958d751bc5 31029884 debug optional chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_arm64.deb ba8282195534a760d389c128475c7fec 58740700 web optional chromium-shell_155.0.8059.79-1~deb13u1_arm64.deb 5ff201a53c75c01ea49d4407a990f16f 31509 web optional chromium_155.0.8059.79-1~deb13u1_arm64-buildd.buildinfo 020ca3cd85820b5798752c88751e5927 79116104 web optional chromium_155.0.8059.79-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEa5s+5E+WDkV2pQjwIyDMsRzdi8EFAmrQ/VIACgkQIyDMsRzd i8E0AA//d71n19RgUdpxhQFUPiMqdq/0rl34CPUneBna6CZZfkLi2VuDk8d118SJ guY7eBXcjG4AE/j2pi8ZnvJ429uiMkKHmnTyLeewKqxGPD4DcVdBOaOytheWyYYa 8bMxLpv93KAkoJByfayo+GA/Mf0hOJCENrGE74Jpf0FUAde71ba07trcBnz8BzB2 2iLRhUctljIbZlDcFIcN/lV35oTh/JKGPxZQYEJKY2X+ACtqPYFRDsd9ipBDrSWf gX5u9/uB7XRFBgPrwQYgiQihWwbrgxrJPhLo4T6X4YJlvnUL9MCdYoyN84/t/RUN KptZGuHID93XaUcGvkwLj03LyQN/6904XC44OR8yOrJHds7nh/s+rYjQpCm/pkYa VJE2v4iDLxY1Ngjd4HgbZACUbL86xKqb7jcRcnueKXs+QaypwHgimDSMdVh2hLEG gRQHmp1PmiDDtEFBQzGPrcKENetoQrOwA2FQGBJezI4mY35986NPD6zheN6dFC4n d6nSmcRYzEIDqTea81sEh6kn6VO1FMjAD7XtL0NprzHmvC9yxAbmcmXVZAMPOAWf 89djwwWAi+lUhrMKnmUxM8C9Y7ePFdDwBArfH3G/p3+cOSL4GfAbC4kpN/DPERUh K30JbqQdupD516lOiDMea3s5sNU4gikatV6a9u/uamcXQn7uazk= =UWMn -----END PGP SIGNATURE-----