-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2026 14:22:49 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 152.0.7977.75-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (152.0.7977.75-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-84353: Use after free in Shared Tab Groups. Reported by Google. - CVE-2026-84352: Use after free in WebGL. Reported by Google. - CVE-2026-84354: Incorrect authorization in FileSystem. Reported by Google. - CVE-2026-84359: Information leak in Skia. Reported by Google. - CVE-2026-84357: Improper input validation in Omnibox. Reported by Google. - CVE-2026-84324: Use after free in Proxy. Reported by Google. - CVE-2026-84349: Use after free in Browser. Reported by Google. - CVE-2026-84326: Uninitialized resource in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-84333: Use after free in Dawn. Reported by Google. - CVE-2026-84351: Buffer overflow in GPU. Reported by Cassio Lima. - CVE-2026-84325: Improper input validation in DataTransfer. Reported by Google. - CVE-2026-84328: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84347: Use after free in WebRTC. Reported by Google. - CVE-2026-84323: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-84358: Improper privilege management in Downloads. Reported by Google. - CVE-2026-84332: Incorrect authorization in SiteSettings. Reported by Google. - CVE-2026-84330: UI misrepresentation in FullScreen. Reported by Google. - CVE-2026-84334: Incorrect authorization in Chromoting. Reported by Google. - CVE-2026-84348: Information leak in MediaCapture. Reported by Google. - CVE-2026-84335: Incorrect authorization in TabStrip. Reported by Google. - CVE-2026-84327: Incorrect authorization in Autofill. Reported by Google. - CVE-2026-84329: Confused deputy in CredentialProvider. Reported by Google. - CVE-2026-84356: UI misrepresentation in FullScreen. Reported by Francesco Topol (k4tedu). - CVE-2026-84350: Use after free in TabStrip. Reported by Google. - CVE-2026-84331: Incorrect authorization in Actor. Reported by Google. * d/control: bump rustc-web build-dep versioning up to 1.96, now that we have that in bookworm-proposed-updates. * d/patches: - trixie/rust-no-alloc-shim.patch: drop, no longer needed with newer rust. - trixie/rust-sanitize.patch: drop, no longer needed with newer rust. - debianization/rust-disable-debugsym.patch: add --no-mmap-output-file to link flags (another attempt to reduce armhf memory usage). - rust-1.85/jxl-simd-avx512.patch: drop, no longer needed with newer rust - rust-1.85/jxl-features.patch: drop, no longer needed with newer rust. - rust-1.85/parsing.patch: drop, no longer needed with newer rust. - rust-1.85/image.patch: drop, no longer needed with newer rust. - rust-1.85/rust-is-multiple-of.patch: drop, no longer needed with newer rust. - rust-1.85/file_as_c_str.patch: drop, no longer needed with newer rust. - rust-1.85/mojo-features.patch: drop, no longer needed with newer rust. - rust-1.85/zip8.patch: drop, no longer needed with newer rust. - rust-1.85/std-from-utf8.patch: drop, no longer needed with newer rust. - rust-1.85/let-chains.patch: drop, no longer needed with newer rust. - trixie/adler1.patch: drop, now that we have a newer rustc-web in bookworm. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Exclude a couple of targets from the pre-gen process as making them causes files to be written to the source tree. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Fix FTBFS on ppc64le systems due to FFmpeg patch update. Checksums-Sha1: 338551f443c9940792477e13eef535ab6111334b 4717392 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 6949a1c499dc7ab740a2fe86acc549a8e5899e19 36055444 chromium-common_152.0.7977.75-1~deb13u1_ppc64el.deb 38f9745ecf8bb064a9f719d09fb5292b734703a0 30979408 chromium-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb f48007014d3adc44d016b966064ee806b252e64f 7777552 chromium-driver_152.0.7977.75-1~deb13u1_ppc64el.deb 8fd9f35907f68c6c31effb2040eb041dcaf4acd9 25140756 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 5b8f97eccb504cd3bf2b3a3c3996b7bfdb2374b5 62302136 chromium-headless-shell_152.0.7977.75-1~deb13u1_ppc64el.deb bd9cad26d3f6d4d86e85441202d11c1583ee9eb2 19688 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 002352cd4dfc0574c44e31f811828f3629be6a92 144356 chromium-sandbox_152.0.7977.75-1~deb13u1_ppc64el.deb 690ffd296f2cfeff4ba610b7c89b87ba7618cd02 26169756 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 148a2f7ebf45d3688bbe5cc843898702537f4b69 61825636 chromium-shell_152.0.7977.75-1~deb13u1_ppc64el.deb 474d7b9b3bafa61d197c0a2b05742edb495fca78 31358 chromium_152.0.7977.75-1~deb13u1_ppc64el-buildd.buildinfo f68d31823090216d40067c16f4759b6dafdcfadc 85938044 chromium_152.0.7977.75-1~deb13u1_ppc64el.deb Checksums-Sha256: 176fa112a8a99596e88bd5f92e3c1eba405d9d09ed282faa3d5544f52bf99c97 4717392 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 7736b9573dc3e414ede9d66ea063f3486f47f000b1110cd82a78d9c50a5784dd 36055444 chromium-common_152.0.7977.75-1~deb13u1_ppc64el.deb 4964d2d24e0cbae5fa7875d38e10df0527f3da65d367a9f98fb0ba1405d55ee6 30979408 chromium-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 581800a461dd2dae850161b22f0d1945d644ea0e0ceec8d1d0229fcb01319c3c 7777552 chromium-driver_152.0.7977.75-1~deb13u1_ppc64el.deb ba21df769586fb975890b4643df61929aadc4e82dc101954f6794588c8ae405b 25140756 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 8986ad6c8a2197e63d20ffd005b4d9ee122d0bc059c2ebaf1403e17d4ad5b739 62302136 chromium-headless-shell_152.0.7977.75-1~deb13u1_ppc64el.deb 3ff853bdb29af6e4456b20d87dfe8b15ee53b0ee4559bab79d819e1193bb9700 19688 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb a79a70a87f75c8f2bc0b9580ce4fd04e85b2554a594654af1be4026de2914ff8 144356 chromium-sandbox_152.0.7977.75-1~deb13u1_ppc64el.deb 849247c1658feed62b934af900adf9d3190b08d671b83cc59800b321d7f72172 26169756 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 11112a8302f3561516f1866d6218b6ef1ab31d0a5b127421aa82af8b732e0c2b 61825636 chromium-shell_152.0.7977.75-1~deb13u1_ppc64el.deb 4b8ca89a4f65c8bd92662fce01d0b7df5c2c38b06bc4f31d657f7e5b79d7c0c2 31358 chromium_152.0.7977.75-1~deb13u1_ppc64el-buildd.buildinfo dabbe524fe4fccedabc21acdf494241bef265a4512db646bf01d513d2c7e83fc 85938044 chromium_152.0.7977.75-1~deb13u1_ppc64el.deb Files: 05c9d86bcaf9b2fae5ef4d94db623b5e 4717392 debug optional chromium-common-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb c89bd18b3752269065734b803e769ae6 36055444 web optional chromium-common_152.0.7977.75-1~deb13u1_ppc64el.deb 01b9ea8d32b00783b6fc0e23bfe20783 30979408 debug optional chromium-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 9a5980357be7f2d2a3b7c44fe735264a 7777552 web optional chromium-driver_152.0.7977.75-1~deb13u1_ppc64el.deb c0faa806504eae2e3693e1aa89cdfa9d 25140756 debug optional chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb c2fe8d8074f8a3ca11ebdd55f843e228 62302136 web optional chromium-headless-shell_152.0.7977.75-1~deb13u1_ppc64el.deb fc713c298a26533eacaff369bed05dcc 19688 debug optional chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 19a983824f386c349d94effdd9e0283e 144356 web optional chromium-sandbox_152.0.7977.75-1~deb13u1_ppc64el.deb 6fd1a149c8c278d999f054f4cee6d5d7 26169756 debug optional chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_ppc64el.deb 82dcd020f62c17fc23f85f5ac702598e 61825636 web optional chromium-shell_152.0.7977.75-1~deb13u1_ppc64el.deb b409accc2151a8baa2f8711a0795710d 31358 web optional chromium_152.0.7977.75-1~deb13u1_ppc64el-buildd.buildinfo ee901c90bc86b436b5b2370e36fc7dab 85938044 web optional chromium_152.0.7977.75-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmqZ6iIACgkQNINNphgy m2Rx9A//b/pfag1TjjgaMt7+rWfZCuLNcrb74BKYNUw1ePbaI4yYzlModiCFiLXG vn2aKZk2veEtHyUyczJbBGCTZIjmLUmxI+p43pFCCmBQscJ8IdzmFTPNidqBSOi2 WAqOgdWtAHSiriyplyu1kBM2n05g51Vo3fMgL/8QmKi4pkXnRkY78Knquuuhif6e YsSv5zXow9/sB2cGYcdEJqdubtZZ305RlUZU+/LHjOXh+qUU0xtalScImX3kJn9d feMp59L2K5POsqnFsW1EEuBjPmfEe7uA7niJ3zjGuphQwnxY3gALnPni/zFmOLC4 HOTQ2RbBdPBlxUgIz7U4XOAHCUl9cboA6tRPyWEh30OJoWfimGbT1eAsPrGbYJPE n+PTI7NyXaMPHXLyfDMBoXVGoFH/oNrdAFIgYTvehZU1+bJZstHl6HAtgZc57Y+9 PqQWbhvaHxTne00te21squNlIfTrAK5afnEjNB9dCW3BxCcs8LrPA0RnH3EbwUVp Qjk2HRW13G2IA1hzm0b7k3PlfidxE4DYHxd1bZszLkLDmg1yt+BrIzTVevuNZJ2B S58Kkqj9UzOLoLsDfwul5/SUKuHYkfGWT8qHBhGdqkv9/QsoK5oJgwgld//3+8Vv vpqPaQQ1wfTKzzc97I35U+OkoBheOW1d6O2aQREEOZdddx0UpgQ= =8SjU -----END PGP SIGNATURE-----