-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 14 Oct 2026 17:13:29 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 155.0.8059.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (155.0.8059.79-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * d/patches/debianization/strip-rlibs.patch: drop, it didn't actually help with armhf builds crashing with OOM. * New upstream security release. - CVE-2026-110152: Buffer overflow in ANGLE. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-110149: Use after free in Browser. Reported by Google. - CVE-2026-110136: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110161: Use after free in Network. Reported by Google. - CVE-2026-110165: Use after free in Core. Reported by Google. - CVE-2026-110148: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110151: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110162: Use after free in Desktop. Reported by Findingz. - CVE-2026-110170: Use after free in Bindings. Reported by Google. - CVE-2026-110160: Missing authorization in ReadingMode. Reported by Google. - CVE-2026-110143: Use of uninitialized variable in ThirdParty lmza_sdk. Reported by Google. - CVE-2026-110146: Information leak in Passwords. Reported by Hoyong Jin. - CVE-2026-110150: Privilege elevation in Installer. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-110156: Incorrect reference resolution in Extensions. Reported by Google. - CVE-2026-110137: Use after free in WebRTC. Reported by Google. - CVE-2026-110140: Type confusion in V8. Reported by Google. - CVE-2026-110158: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110145: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-110159: Incorrect authorization in Updater. Reported by Aria Akhavan - Haikhavan Security. - CVE-2026-110144: Incorrect authorization in Mojo. Reported by Souma Ohsawa. - CVE-2026-110153: Use after free in Media. Reported by xinyang. - CVE-2026-110166: Buffer overflow in Animation. Reported by Syn4pse (@ret2happy). - CVE-2026-110169: Use after free in V8. Reported by Xinyang Ge (Anthropic), assisted by Claude. - CVE-2026-110168: Use after free in V8. Reported by Google. - CVE-2026-110139: Use after free in Media. Reported by weihengqiuu. - CVE-2026-110172: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110164: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110163: Use after free in DOM. Reported by Xinyang Ge. - CVE-2026-110141: Observable discrepancy in Media. Reported by Google. - CVE-2026-110138: Use after free in ShapeDetection. Reported by Google. - CVE-2026-110157: Use after free in SVG. Reported by Xinyang Ge. - CVE-2026-110147: Use after free in PDF. Reported by Xinyang Ge. - CVE-2026-110154: Use after free in Canvas. Reported by Xinyang Ge. - CVE-2026-110155: Buffer overflow in PDFium. Reported by Xinyang Ge. - CVE-2026-110167: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110171: Use after free in Media. Reported by Xinyang Ge. - CVE-2026-110142: Use after free in FileSystem. Reported by Andrew Boni. . [ Timothy Pearson] * d/patches/ppc64le: - sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Fix syscall execution go/no-go test logic error Checksums-Sha1: 9d4720c7c09f467e1ee4c9a6fa260e11a36a9486 4763084 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb f01adab631e9aafa030189cf102afdf6a5f77752 37169080 chromium-common_155.0.8059.79-1~deb13u1_ppc64el.deb b1127f08b0355e81444bd3d23efa4474fbc0acce 31153260 chromium-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 1e0578c5ff07dfde57b4fac8240767a1f6f620dc 8201192 chromium-driver_155.0.8059.79-1~deb13u1_ppc64el.deb 39d09f2f665ca41aea5f56e418d27b001c1ca276 25811292 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 95e0486a6569a7fc7cd00bf1db5961cc5a6c9fc1 66318816 chromium-headless-shell_155.0.8059.79-1~deb13u1_ppc64el.deb 5f03d2e43a35634acb7395463fd6e9a8963a5e07 19880 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb f1202682a507ad8cf331782a97df3ecbfa7add36 156200 chromium-sandbox_155.0.8059.79-1~deb13u1_ppc64el.deb 7a5175581dea8ef86b7a6d17d2146931c076ef2a 26269324 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 21d1e15b294f534dfddb5d1cb13f6b64060e96e0 63968000 chromium-shell_155.0.8059.79-1~deb13u1_ppc64el.deb 20a3d0d15a9fc6715d81ddef9630fd1874d68ed7 31404 chromium_155.0.8059.79-1~deb13u1_ppc64el-buildd.buildinfo d22ea3328cd2bbdc84b9d5c337df0dd39598a9cb 88020568 chromium_155.0.8059.79-1~deb13u1_ppc64el.deb Checksums-Sha256: fdba3ec26cb64d022779f9e3b7dba90ebb52a3701e04f3f4a7c3e825dd89debb 4763084 chromium-common-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb e5b1cc75feda0c486f690eb77eebd3d46b3b1b5504097b407305633f64b1395b 37169080 chromium-common_155.0.8059.79-1~deb13u1_ppc64el.deb 4cafab7e32650036404113bf99e5fbef889af35aff9bc03d2486827d4f69558d 31153260 chromium-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 5eb4014f0234e867f4231af798dac1c9ce46cb3c559c1947568eeabdfc24d073 8201192 chromium-driver_155.0.8059.79-1~deb13u1_ppc64el.deb b01bd5c091f8c3db32cff442f2479e96541d0b8d37e06c614cca85e2654308ad 25811292 chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 111ed18b6d38b850051dee0e0ef5cee82a7c5a6debdb829a39b907101ec2ca1c 66318816 chromium-headless-shell_155.0.8059.79-1~deb13u1_ppc64el.deb a8d53f692d2130db3a94454e3f3cec84641a17c6b057eea8b1b3206b7591b279 19880 chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb fe02f69d2f21c2047004de6fe3fa79ac3f2fc3923c9d65a4384e724171af434e 156200 chromium-sandbox_155.0.8059.79-1~deb13u1_ppc64el.deb 4867a9f210256e1a71ae60d4066686831d75cdaacd1dad61d18a0f3274892603 26269324 chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb c5165470d78cd923353f6a11289a90b8434c513758ab0722a801cb6044c45ddf 63968000 chromium-shell_155.0.8059.79-1~deb13u1_ppc64el.deb b8de5f9d288d02ac973a064eaeda3d2c17ab8c80323bfc7e56beba30596abe2f 31404 chromium_155.0.8059.79-1~deb13u1_ppc64el-buildd.buildinfo 40932858b34c6a2ada8c19c6c44a95295c5cd9eb6ccca598d93b8a749bb18b5a 88020568 chromium_155.0.8059.79-1~deb13u1_ppc64el.deb Files: 3cf13297bbadf736803eb797e3822a26 4763084 debug optional chromium-common-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 44193234149150ade714ac1e5f836948 37169080 web optional chromium-common_155.0.8059.79-1~deb13u1_ppc64el.deb 7e8d7ec5a267776ba1414c18a568e435 31153260 debug optional chromium-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb a2dbefcc3a305716bd990f8a653e12d5 8201192 web optional chromium-driver_155.0.8059.79-1~deb13u1_ppc64el.deb 5f9a967359b5a3e4f1439400ce8c0584 25811292 debug optional chromium-headless-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb eb0ae2fb1c62a107a1369ae925711fb0 66318816 web optional chromium-headless-shell_155.0.8059.79-1~deb13u1_ppc64el.deb de561131a1777c0c5548976a507997cd 19880 debug optional chromium-sandbox-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb 3baf51ba75dc0483b36972094c5028f9 156200 web optional chromium-sandbox_155.0.8059.79-1~deb13u1_ppc64el.deb 9b8c3d3db962f48ce4df40d02b14297f 26269324 debug optional chromium-shell-dbgsym_155.0.8059.79-1~deb13u1_ppc64el.deb f1d89400c11b8a6d2de3e03660c83d08 63968000 web optional chromium-shell_155.0.8059.79-1~deb13u1_ppc64el.deb d342dfc065d03d7fdebc503109ec8f07 31404 web optional chromium_155.0.8059.79-1~deb13u1_ppc64el-buildd.buildinfo 0497210c26d1bcf01933976e6950c268 88020568 web optional chromium_155.0.8059.79-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmrRT3wACgkQV8ucRsMT puMYqg/+K1STioWPej4hPyovB4Xu02Gjw+Nj8h+NQ69Pj2r1w75dxWELqFXDaJ1m KXNtoJTzdLWjvQA+L6NXnIsryQUr87t2zCgFL9JAoTFClCivbZT7tuFTlV4tm59t RBlwoCyTW4k4uYjXcTrpuxsJEqKbH3xeO43AKK0vAObRan3UvrsalPSGFQYJ/sV7 aVkGGH9OzLQHaOYWQcLTLyqpb73tgcVavS+OhOXEc/12Ua/jPyZK9DYxiJabcZ6t QxCO776C6IRbIsu4UWNybkTBWkpigaN4yU/C+A7+JJWNMTsSHIFtusGI/W3Yk48B SwMdftNxkhL5u8TEu3tm3AQuS9gi3b5fOUgu4xmswYVjIm70NTQt/pkY0YX2jO1s OXT6c0CN9ITbi7pIfVrFMNVRA14UWF/oBjyMtIbgIwPQvGX0fq1bwOSctR5ScUrN fUeaQITFNUBB16594oSbXbO530WjQ+jwA5VBh2PTTLe5nFWTlE5hrJRmFw+fq3Pk Ge2g/Ei7nz9DrKKan8uMPbjtsx8BARoZ4NqSuFjYcpOBpOcKaeQXG/fkkzf+QNwH DdeW83To5R8dCbYLyPROIJhq/9pTAUgZD+A5RHB6tvrzO262WE4oqOBCt0yYrw1Q dVfBzW7oX7a8zj2v/W1Sp+23xp70rhDBIqtQM5OWmKPwulBcHTY= =eBQh -----END PGP SIGNATURE-----