-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Oct 2026 17:13:29 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 155.0.8059.79-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (155.0.8059.79-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * d/patches/debianization/strip-rlibs.patch: drop, it didn't actually
     help with armhf builds crashing with OOM.
   * New upstream security release.
     - CVE-2026-110152: Buffer overflow in ANGLE.
       Reported by Zhenpeng (Leo) Lin at depthfirst.
     - CVE-2026-110149: Use after free in Browser. Reported by Google.
     - CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge.
     - CVE-2026-110161: Use after free in Network. Reported by Google.
     - CVE-2026-110165: Use after free in Core. Reported by Google.
     - CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge.
     - CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge.
     - CVE-2026-110162: Use after free in Desktop. Reported by Findingz.
     - CVE-2026-110170: Use after free in Bindings. Reported by Google.
     - CVE-2026-110160: Missing authorization in ReadingMode.
       Reported by Google.
     - CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk.
       Reported by Google.
     - CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin.
     - CVE-2026-110150: Privilege elevation in Installer.
       Reported by M. Fauzan Wijaya (Gh05t666nero).
     - CVE-2026-110156: Incorrect reference resolution in Extensions.
       Reported by Google.
     - CVE-2026-110137: Use after free in WebRTC. Reported by Google.
     - CVE-2026-110140: Type confusion in V8. Reported by Google.
     - CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge.
     - CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge.
     - CVE-2026-110159: Incorrect authorization in Updater.
       Reported by Aria Akhavan - Haikhavan Security.
     - CVE-2026-110144: Incorrect authorization in Mojo.
       Reported by Souma Ohsawa.
     - CVE-2026-110153: Use after free in Media. Reported by xinyang.
     - CVE-2026-110166: Buffer overflow in Animation.
       Reported by Syn4pse (@ret2happy).
     - CVE-2026-110169: Use after free in V8.
       Reported by Xinyang Ge (Anthropic), assisted by Claude.
     - CVE-2026-110168: Use after free in V8. Reported by Google.
     - CVE-2026-110139: Use after free in Media. Reported by weihengqiuu.
     - CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge.
     - CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge.
     - CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge.
     - CVE-2026-110141: Observable discrepancy in Media. Reported by Google.
     - CVE-2026-110138: Use after free in ShapeDetection. Reported by Google.
     - CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge.
     - CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge.
     - CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge.
     - CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge.
     - CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge.
     - CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge.
     - CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni.
 .
   [ Timothy Pearson]
   * d/patches/ppc64le:
     - sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Fix syscall
       execution go/no-go test logic error
Checksums-Sha1:
 6119f22557145014b2fdf1bf054958a1b2d69c28 8846592 chromium-l10n_155.0.8059.79-1~deb13u1_all.deb
 3f0a8456486d92781a35e8c386ca82b4328c944f 27975 chromium_155.0.8059.79-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 8352d67dffd3dd558e8b74fde7f22e9e433970230313845f16755483edb06e9c 8846592 chromium-l10n_155.0.8059.79-1~deb13u1_all.deb
 b907d91e26394f9687cdb9d0ad32e396b3592319e089f05f04095200f886e6d7 27975 chromium_155.0.8059.79-1~deb13u1_all-buildd.buildinfo
Files:
 fa2b5b28e2499372ff30eb24cf5c84df 8846592 localization optional chromium-l10n_155.0.8059.79-1~deb13u1_all.deb
 4d1540edd30d7c5d8f5e07f27e193107 27975 web optional chromium_155.0.8059.79-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=tYfI
-----END PGP SIGNATURE-----