-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 17:13:29 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 155.0.8059.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (155.0.8059.79-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * d/patches/debianization/strip-rlibs.patch: drop, it didn't actually help with armhf builds crashing with OOM. * New upstream security release. - CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-110149: Use after free in Browser. Reported by Google. - CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110161: Use after free in Network. Reported by Google. - CVE-2026-110165: Use after free in Core. Reported by Google. - CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110162: Use after free in Desktop. Reported by Findingz. - CVE-2026-110170: Use after free in Bindings. Reported by Google. - CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google. - CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google. - CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin. - CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google. - CVE-2026-110137: Use after free in WebRTC. Reported by Google. - CVE-2026-110140: Type confusion in V8. Reported by Google. - CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security. - CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa. - CVE-2026-110153: Use after free in Media. Reported by xinyang. - CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy). - CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude. - CVE-2026-110168: Use after free in V8. Reported by Google. - CVE-2026-110139: Use after free in Media. Reported by weihengqiuu. - CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110141: Observable discrepancy in Media. Reported by Google. - CVE-2026-110138: Use after free in ShapeDetection. Reported by Google. - CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge. - CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge. - CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni. . [ Timothy Pearson] * d/patches/ppc64le: - sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Fix syscall execution go/no-go test logic error Checksums-Sha1: 7c3ad364d873cdfbd05458d3f6093e4c81506cea 4141052 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 43fe5967008a4f9ddab9c1aa672c89ba91b8fcba 31426884 chromium-common_155.0.8059.79-1~deb13u1_i386.deb 78a60907622523992c08fa1c10805ac32b011713 37336640 chromium-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 50c4d8240d5462eeb417d7cc1f90a56f3ec5fd56 8847832 chromium-driver_155.0.8059.79-1~deb13u1_i386.deb 377724aa089aa180e1d8e42309de619caddb2bd1 31007628 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb aa21c3db03e3f566d07c6710a794949c9808cf71 64928732 chromium-headless-shell_155.0.8059.79-1~deb13u1_i386.deb 559078d7b9562ef12b1f311627a75f7e2552dcaf 19372 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_i386.deb c1a4f24db21e0d0712c2df21fdb5dd642d78d72b 155828 chromium-sandbox_155.0.8059.79-1~deb13u1_i386.deb b3cf75f3793a7aac0b687139f73fa2f549b76634 33383952 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb b8b8b70034be9e3a6bbcf61efb00bad5f6761722 69333780 chromium-shell_155.0.8059.79-1~deb13u1_i386.deb 9a0841014c964d4055e2cb9b28e9ddd8d09c2160 31393 chromium_155.0.8059.79-1~deb13u1_i386-buildd.buildinfo f2188524beec8fa282646948f1126c8ef43e9f03 82925996 chromium_155.0.8059.79-1~deb13u1_i386.deb Checksums-Sha256: 604d718ff31f5470ea29bb7d3aca4b7d3900b886bf7b6231e0fe9b9b0a8c2772 4141052 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 186ce55a1bc4f8fb6515866f363090587366811b8d7a03a1b8f0105a28752492 31426884 chromium-common_155.0.8059.79-1~deb13u1_i386.deb c69f66578459144445373668040bd54ffc45ff69d9090153252d69deb7c43ea0 37336640 chromium-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 86074eaf5370cd8003708af92f70ece8441cc967ae4ad25a4f352a5758313232 8847832 chromium-driver_155.0.8059.79-1~deb13u1_i386.deb 31200c20f083c568e18995e1e2cca0951bf9bc145b20a8a4d4209e95cd9c5f52 31007628 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 170b3fe2cf5c6d5136e85f4ff1425acfe266201f8a0ee199a2f2639a864bc6c6 64928732 chromium-headless-shell_155.0.8059.79-1~deb13u1_i386.deb ef6060512df3cdcb90777b2ca540f0ba75ca8fc5ea67e95f62acb8be600b2e83 19372 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_i386.deb a5b46a76ede0c2f1945986585564099037be40e5e21e9cc72e0dde9f1c5b138f 155828 chromium-sandbox_155.0.8059.79-1~deb13u1_i386.deb db78d912549cfdbc4e26a3e1d781c354dd3e47fd9861248f259b442fd12c41d3 33383952 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb fd9a5c9be106a6dd7a3b48552fc38522228c623cf44fdbebe68f1dbde9c33ff1 69333780 chromium-shell_155.0.8059.79-1~deb13u1_i386.deb 4a8bac54fd38813c5ba68e05ed6491a7d7e40365dd0ca6a463d8733251ed0579 31393 chromium_155.0.8059.79-1~deb13u1_i386-buildd.buildinfo 1ba0ae8737151e320e34c1b273c0afe1c2857b257f626dfc9bfd5459f2d973e4 82925996 chromium_155.0.8059.79-1~deb13u1_i386.deb Files: 8e605e50a659130daa42e2bb185a5c93 4141052 debug optional chromium-common-dbgsym_155.0.8059.79-1~deb13u1_i386.deb cc3f607ea5cd9e34492b3efd13b99691 31426884 web optional chromium-common_155.0.8059.79-1~deb13u1_i386.deb e1cd48a034e1036bb81b472c8ae36fea 37336640 debug optional chromium-dbgsym_155.0.8059.79-1~deb13u1_i386.deb db2224865067d8e4a9d35bad1432bbb0 8847832 web optional chromium-driver_155.0.8059.79-1~deb13u1_i386.deb b2bec2077c62cd8aa3cbb7a8b99ec251 31007628 debug optional chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb a213d873ac9324d84f08ab86c6b3708c 64928732 web optional chromium-headless-shell_155.0.8059.79-1~deb13u1_i386.deb b152e41f0d39cb92240ee72210b6a515 19372 debug optional chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_i386.deb 79640e49683f952a8210dfe85734b5d1 155828 web optional chromium-sandbox_155.0.8059.79-1~deb13u1_i386.deb 6bd74a641af3890c065bd26eff5cac88 33383952 debug optional chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_i386.deb b241a481e8d9836b63e48450054aead0 69333780 web optional chromium-shell_155.0.8059.79-1~deb13u1_i386.deb a567952552fd6267781130331cc1a60d 31393 web optional chromium_155.0.8059.79-1~deb13u1_i386-buildd.buildinfo 824b0d92dc02807f70d98bfbc330da73 82925996 web optional chromium_155.0.8059.79-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmrQsJ8ACgkQbheoBegw XLJmqQ//XYxsVc0YSAA2yD0ljqtTpYVfcqjt8enMnFtFz/sX04kmkBmeWd47v9M+ nUOGGufWSKCMqdZnPcNEVAFl1xK2vaKG/uoCB4mHUJSAqNnrV+OnVLX03PuInHaA RU5jDOd1MoO+VJOB+vSCNp3943jC3Ur9Jbb9gJIfrldpzlDrAC+eHkX2QMqR6SLP yFHj4vNhXhT8YymcieJ5E7tbDNn8KOuUmXeXnO9I6XzqPjOdAIG+iFluoWvH0R3W LycF4WIDeQNpUgws5+/3h7KE76/7PtMeCtMaCDHjHNDwZHcAO3sVd4hyEGTqH4af PVy+kJGmZvtzmgMGrNhs0cjMCGgM/tHkQRNJRiusU9lqoz2Y21blecc8b1KysnXn 44L0UKxo4d+MnIVAmbKy0QT7NZKnW3KMzh4LdsrbUPhKmmzvfCDhvD5ZrQ75MKlh AS3lpx9FFW+rBCGIj1nGx6Mfkvmjprb1x6Pk0WF0hesWDJvh1jwB0gxx5rnRNywA 8hwU+9qZujBNDcJRa+/diWuBrVX6/sfwltpJM8lE0Yg8B0+0FKMv7bPzOt7Zuwss QQGiPWKUxqbvzpQQ8rN+vltcfToGmYSr20WdGrFRwCBbdjGVjelplVkSC2hqpIT5 0id+TpwPci6cugbmkHuAylP2GYFawYlH38oQstxavtkqIiYxtCI= =f+wv -----END PGP SIGNATURE-----