-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 148.0.7778.178-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 500ecee077a915e39919f727640fe8e376e24385 6437060 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 2ccbcfe3a7b320d65a87f8d325426ce8d8e6ff49 30421984 chromium-common_148.0.7778.178-1~deb12u1_arm64.deb 496522514a6c1f4ac46ddfceabaf6d8128dd336a 37737256 chromium-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb bb6d095f9b3844f90e9790be37367e825f685e1a 6763036 chromium-driver_148.0.7778.178-1~deb12u1_arm64.deb 9f8e58b066c93aa8d3f617f90f682060485ee20f 30646156 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb eac88c66906bc757168fe42c0440ee9331de32e5 51004884 chromium-headless-shell_148.0.7778.178-1~deb12u1_arm64.deb c2b1adcfeb717978f1db2f2713197b48af09df68 20256 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb ea85c76b017ce1ae91b6ad8a122b4c76b96eccfd 120808 chromium-sandbox_148.0.7778.178-1~deb12u1_arm64.deb c5197d5f8bb14c00ec90e7048f180bdec073d2ca 32996676 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb d71e0a1dfbba7f4f4097678209999776c3b3daa1 55910044 chromium-shell_148.0.7778.178-1~deb12u1_arm64.deb ef02c6c96ecf0aa4e6b1c8b98f9c551e4b4f7c99 30453 chromium_148.0.7778.178-1~deb12u1_arm64-buildd.buildinfo 133996b1d0fcc8cacd6d0f2aa7530c164f5872db 65376412 chromium_148.0.7778.178-1~deb12u1_arm64.deb Checksums-Sha256: 5ae81f71d08819aef1adad2438b96075d9e9b5d782741dbae351c9461bdc1c8c 6437060 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb bb6dfc1d9ff6fbd582adfa3caf43f8d17db4436f9b601536d3943204d227367d 30421984 chromium-common_148.0.7778.178-1~deb12u1_arm64.deb 1a6d486909e87de30a062ea119de549e856d4b4dfc12879126f380d60b52636b 37737256 chromium-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 27fa241cd5592487521704b6ecda84d00166c3f2ef4d65111fecb3e1665da341 6763036 chromium-driver_148.0.7778.178-1~deb12u1_arm64.deb fcdf478473f9f1db43fef1d16135159be9ea7bb56f4e76bf7d822e3397eb32e3 30646156 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 837cda013d2d751c2bc827a85e1353a78b2b1962e7919cb145807afaed1bba8a 51004884 chromium-headless-shell_148.0.7778.178-1~deb12u1_arm64.deb 5ddc9d61d3a5c4ed46f2eb8638e438d2679257a4d5f1547d21b8ed39a1162f4d 20256 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 71e00dbbccedf926ba94aa09c15dea1c5992320a710ba0aa7aded837f72edc54 120808 chromium-sandbox_148.0.7778.178-1~deb12u1_arm64.deb ce3514a9446971d671ae5311b72d869a8a68c1702fe8a5d574adb5437dabfc91 32996676 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 74b2283f80da5f32fe35aa2cfc25748e03f27415d57cbbfa077043a878f46ddc 55910044 chromium-shell_148.0.7778.178-1~deb12u1_arm64.deb 8a29292fb92ffb5308b1d13d2a8f49f345d649cd26f5c6451a8f9fd1c17c9922 30453 chromium_148.0.7778.178-1~deb12u1_arm64-buildd.buildinfo 6c4db505b1093c8bd0f0502e197c78a5fa1177da270f2391d7aacf6a8a53ea98 65376412 chromium_148.0.7778.178-1~deb12u1_arm64.deb Files: 1d0ca2e6bc1f9e7709762184994d93f0 6437060 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 9fccdc5ceba344896359920e37dde42b 30421984 web optional chromium-common_148.0.7778.178-1~deb12u1_arm64.deb 3d340f65760dc0864d088b305705610e 37737256 debug optional chromium-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb c6860746170b58980b68ad017838c196 6763036 web optional chromium-driver_148.0.7778.178-1~deb12u1_arm64.deb 9a6d7342059de14dad2748500aea323e 30646156 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 38eceaf9f53bd9378f72bb265f4b592b 51004884 web optional chromium-headless-shell_148.0.7778.178-1~deb12u1_arm64.deb 49825de52d4440dc208146523169cc05 20256 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 951137e90ea1fe9d6f7d53ed14be6f30 120808 web optional chromium-sandbox_148.0.7778.178-1~deb12u1_arm64.deb c85ca6ced67d2b02a7c54afd38911fbf 32996676 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_arm64.deb 0adbc14a07742cbbb5e75326d14b86b6 55910044 web optional chromium-shell_148.0.7778.178-1~deb12u1_arm64.deb 64dc275924ecc452d58c2df8a235eba9 30453 web optional chromium_148.0.7778.178-1~deb12u1_arm64-buildd.buildinfo 17986c333ef084b5e3d5eb584c4d1c3a 65376412 web optional chromium_148.0.7778.178-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmoO+JwACgkQScpU3dYu lLhIQg//YLvd4gWG6/7W6MIcgRSQldHywEERlpYO0JDw9vFBDn3HYQBjjoDpGyR8 ZVkOFFsT/oZEpiwDgIbUL4O0MmLCkv16M6j2ws+ym/Cds+3hD5EjBC8lHZ6t58yH 8Ff2iaPFxRG8vbcAxCLhkji0ORosqr0/1k6RuUTTMBxskBRY/jmwkoXRtQAeynLM 4lqSUFI/LtzbrSm9+OJW7SF6OJVb11+CsHMZFSUNGB8wwzLbZ2puKAXS/R0U+lnM bStK77HSLtHXiGCcBQ9s8maeGi0MZ3jK/ehYEYnbMVIgRmA54pBD2BLFQGz7T7F4 O5o3QoVMzoThkODZBHOlG9/yaa1VT85Eb7F5eI9i/yEF2dK/N06SBhHsHoe7POmF gIWFTjBDDxoGIZtzJt78erjqkCzXnhNCDjqxporYdL5kauwn2fkXJiuBCXMj2Hbt 86PHZP6araY9KwA4kTy2KkcJvHxWfegymqkrOOGDBFtg/yoMxC3kT0chQhe/WhJ5 tAWXOzzAYz/zrsBV+Nk5wHL8BEe65hcx/K8TLWRnxWwih0Na0oao/OJewiCGLyI/ 0BUzyw0JRWhIfybl0ogrwr8wQ62zu4OisvL/QYTHXx5MtHB6QbTMH9P0zgAE5rSP sAodJeZbCjUdo4DHL0W1YxaSLkbp+/8IO2Ai5n8eLQ2OcPzTe2o= =V5OR -----END PGP SIGNATURE-----