-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 148.0.7778.178-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 71e194408bd22191bb516d9f6b837ca3a99d1157 6133852 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb ed33aaa46efacf926ed51f3be633e5ede00c2d36 30254976 chromium-common_148.0.7778.178-1~deb13u1_arm64.deb 24eb340c57c91cd869dd065b99c5068b5ee19563 34715536 chromium-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb c3da8ce4b326542fc8bbe323a7f325d8bd494920 6669552 chromium-driver_148.0.7778.178-1~deb13u1_arm64.deb 816f13a4188c7635c810318ad951d9be9bf10f9a 28981140 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 5503605eaab7452bb17c143225df0bed01511f24 54857844 chromium-headless-shell_148.0.7778.178-1~deb13u1_arm64.deb 91d8926ca3a2dfcf440dcf4613948e7b0b4fe040 21084 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 1eff543db3fafb1504b8650a7ac5771b05719cb9 118752 chromium-sandbox_148.0.7778.178-1~deb13u1_arm64.deb b77dd549389e5c9fbaf4627d3e86ac77674dceb6 30406972 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb c8526cea8858c6b2b320d333e2af11beb9498385 54686732 chromium-shell_148.0.7778.178-1~deb13u1_arm64.deb 82bda7d5dfc6bb51ccd055993386d22f21e9216c 30646 chromium_148.0.7778.178-1~deb13u1_arm64-buildd.buildinfo fd5691688f8844ed8494d94f79a527e245231a33 73465568 chromium_148.0.7778.178-1~deb13u1_arm64.deb Checksums-Sha256: 973c2e0f7c04cb3f78eafdb99153b6da86ec4164654806f1f799dc0445f7cf55 6133852 chromium-common-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 95f7e542aebb883e754e231b1099baa0da925809bda5423589d29999d8211584 30254976 chromium-common_148.0.7778.178-1~deb13u1_arm64.deb 0dfe6819434386e52c6e7d5f434478350ccbae921d7b2bf7da4cdad0d81da5a1 34715536 chromium-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 2d18853a52456f921eb948e68cb85c3cb7cd8a70514dd0f4c30c905da5ad3a85 6669552 chromium-driver_148.0.7778.178-1~deb13u1_arm64.deb 378352ebbad61af4fbfa264f8fc8f55d91c303362c96cad005bcf6365a6b6224 28981140 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb df7c4f315fbf394c32f14505451f2575a17860573bef056d6c554d9072efd813 54857844 chromium-headless-shell_148.0.7778.178-1~deb13u1_arm64.deb 91d9b3908a82fcf3e5d114b0a60002c05d885ebaefe5f2363c1485868dc72dbb 21084 chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb db37bc81ca31c4648e26e8a7e60ade43611bc4ee7037fd87d48911c897db57e9 118752 chromium-sandbox_148.0.7778.178-1~deb13u1_arm64.deb e8ebadec452c1c7347a111e0c2a27b791d9ab7f11aee0ef88ba245ea3dcedaf6 30406972 chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb a1f039927d3fefdb902ebdf71ca487ed35898bb32185900730f34997d70b25c4 54686732 chromium-shell_148.0.7778.178-1~deb13u1_arm64.deb bdc6ecac8ac566828ce012d1b5838baaad0841bd37cbbb49f05fd3e5b4b1812b 30646 chromium_148.0.7778.178-1~deb13u1_arm64-buildd.buildinfo ea90dfa6757edc4570f5382ada94b12e63a6c8be68ae553c5f719f043a702ecb 73465568 chromium_148.0.7778.178-1~deb13u1_arm64.deb Files: a07975e828532bddeb813cb6644236fa 6133852 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 95e482c60140ae9a38e25061d391ff14 30254976 web optional chromium-common_148.0.7778.178-1~deb13u1_arm64.deb 2e576f86eb3086d59594d2ff6c92f704 34715536 debug optional chromium-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 87b6ce15d057f0629c07af30acd45c59 6669552 web optional chromium-driver_148.0.7778.178-1~deb13u1_arm64.deb 05b070ffeab4cfb1d748aea8d4c80d64 28981140 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 7c7c1aaf634751295dcfa0174a8a74fd 54857844 web optional chromium-headless-shell_148.0.7778.178-1~deb13u1_arm64.deb 616cb5f13efdaf82bbce2cac51be1488 21084 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb 4968682f7e13ef41bf6befb975b4ee3c 118752 web optional chromium-sandbox_148.0.7778.178-1~deb13u1_arm64.deb 5aaac620c63694d4f89d7ea0f2ace02d 30406972 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb13u1_arm64.deb c65b2e093027ffe059eb8f27d06c13b6 54686732 web optional chromium-shell_148.0.7778.178-1~deb13u1_arm64.deb 8fbd1b8af86860c901680b55a9e8977b 30646 web optional chromium_148.0.7778.178-1~deb13u1_arm64-buildd.buildinfo 4bc465c47043161092d18210983dd30e 73465568 web optional chromium_148.0.7778.178-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmoO/DQACgkQXVp1sEH/ 1mLSSw//UkVGJGWpmo+QWDBdaB7fHaiBw6AcILo65BVmEh8EPWjrhOyU8T9+kX61 hN0q8ZSkAL1Ha2h1BbpOlLHdcZaFGXBhmkV8hr6hvNofPCSD4fG/AVwRGvTnuzxn NhHiBEt4a11ztu2RjMw63SvHo4QCvEluKXOizxHhhvNRPneaG5TRG2yx1RKNKZfn lNVyHw+Cs/QcLiL0CKNyyymevRvxXbFd+A2TN2Zoq4ZYl9fW1q1QNpHsp+mZGmQl kVR37PvteeV6GBENKrbNqxtWIN/WrKxHqq4xVQD9Tey78KyElxMvkLrRlj1BPs6Y 8pCju3AhlHwzivT25zXGkE2cN75BJJFtLjeccNuTEb7ECpOc+5zmkRmdlbe+rKf/ p0Xt64jtIyYWVLYzoYWKhc69QiYuZQdBzs5Dhd3EotmRJKz3W811JCm4KUM6wYbC LfZQH31bRXW70Jj3g0FZ9kC+AywDN0rHZXJ5MbPcRoJztOsBMge28XIarxmQ8HYF 5NWGn4p8qeFp7jWU0sWrJe+Ln1J80sTXk6hhRvt9zqo4LDyKzfQxSux4ELNBUjId RUyIbgyAJwxlTW1UAyjieZcN6WiQeRrQvTfWUwEyqqfLC/ZIJ2HKI2h5RQLmE3Ie ogHm+ipXv1fx5UDSSdUTOibSHUt1jBrpDmlKKEP9C/QAg3l9MiQ= =hITB -----END PGP SIGNATURE-----