-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 23 Jun 2026 20:40:58 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 149.0.7827.196-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.196-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-13028: Use after free in WebGL. Reported by anonymous. - CVE-2026-13032: Use after free in WebGL. Reported by Google. - CVE-2026-13033: Out of bounds read in Blink>InterestGroups. Reported by Google. - CVE-2026-13038: Use after free in Autofill. Reported by Google. - CVE-2026-13021: Inappropriate implementation in DeviceBoundSessionCredentials. Reported by Google. - CVE-2026-13022: Inappropriate implementation in Autofill. Reported by Google. - CVE-2026-13023: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13024: Insufficient validation of untrusted input in Navigation. Reported by Google. - CVE-2026-13025: Insufficient validation of untrusted input in DevTools. Reported by Google. - CVE-2026-13026: Use after free in Digital Credentials. Reported by Google. - CVE-2026-13027: Use after free in FileSystem. Reported by Google. - CVE-2026-13029: Use after free in Web Authentication. Reported by Google - CVE-2026-13030: Uninitialized Use in GPU. Reported by Google. - CVE-2026-13031: Use after free in Blink. Reported by Google. - CVE-2026-13034: Inappropriate implementation in Passwords. Reported by Google. - CVE-2026-13035: Use after free in Bluetooth. Reported by Google. - CVE-2026-13036: Use after free in Blink. Reported by Google. - CVE-2026-13037: Use after free in WebView. Reported by Google. Checksums-Sha1: 94cdf7bcb5727a412e35b0812e4c4836c219b570 5318596 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 12e4323696fbef1277db88694901eca5afb04885 26235108 chromium-common_149.0.7827.196-1~deb13u1_i386.deb 4f968d0284925ac064943c207f4310bafcdbce14 36228036 chromium-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 3076ba34a018faee57f33ca5a34ffd551cae5189 8116504 chromium-driver_149.0.7827.196-1~deb13u1_i386.deb 3e9f9cb840fae443c79ad444a134808a749ad72b 29807120 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 0145b508567ac50635c025735e5309cf2fe97622 59811372 chromium-headless-shell_149.0.7827.196-1~deb13u1_i386.deb 9625202ff38d6b5a0a89e11b34a2bb8229694047 18984 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 63f4ee23603c5ca212afd4129bc905a39b621b29 125924 chromium-sandbox_149.0.7827.196-1~deb13u1_i386.deb ac2233e850bd98c3cf68bb234233c3d8ec5bb5bb 32733724 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 66895b597824b2184b67ed759e18afb40ce0e22d 65578636 chromium-shell_149.0.7827.196-1~deb13u1_i386.deb eca07facd67b3f1453cdf34f06354a4b12ea6fe5 30618 chromium_149.0.7827.196-1~deb13u1_i386-buildd.buildinfo aba0d1bd9d99a836bb008b83bba3017b4a06ecd4 78105492 chromium_149.0.7827.196-1~deb13u1_i386.deb Checksums-Sha256: 24391f62b98fab5ebb0ebeadb4a964ff1bc6043aea2dd89062e350e6a133c44f 5318596 chromium-common-dbgsym_149.0.7827.196-1~deb13u1_i386.deb ed6d77b06af3bf766a57a0b2d040c6d3636d9350ffe9cb8d9e00844784a60131 26235108 chromium-common_149.0.7827.196-1~deb13u1_i386.deb 4afc0fbebfff5aefac8150f701b1228c68896ace297d530ebfd3c5ce49bf4e22 36228036 chromium-dbgsym_149.0.7827.196-1~deb13u1_i386.deb c19e6a9c0db55f2bf352ee7b37294b4d6c758b39f84ce89f76368a64483db41f 8116504 chromium-driver_149.0.7827.196-1~deb13u1_i386.deb 6dcdb3602252e2f64147e64c031c5327c1e7286bfa09d2845e81a64b7d398a81 29807120 chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 3c75e50b1a3144590ca59ffd72edac1a43a79a1e7797db9681a615850e49a2a7 59811372 chromium-headless-shell_149.0.7827.196-1~deb13u1_i386.deb 6d86fa9cd1b77d11fe168bdb9c9092e7f3deac5f3be5b0f0f0462a38a92e08f6 18984 chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 4c9a2455582bc4c1573d4e19b39fb557323668831324706e30d7536e42d2d275 125924 chromium-sandbox_149.0.7827.196-1~deb13u1_i386.deb 7dc730b3133afa45826f955547228035210265c208b0859c770e504162142335 32733724 chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 45f224ea43b925a3b20badc1bb22320912eca66519e30d98ddd91b2f377e5d64 65578636 chromium-shell_149.0.7827.196-1~deb13u1_i386.deb b0b73a7b96ed8a9c7ecb8dd43f2876f1fdf68d55f8169f26beafa7f1c5c437e7 30618 chromium_149.0.7827.196-1~deb13u1_i386-buildd.buildinfo 6b932e2fc350d91986afe39ed3caba5a21d0a70890492f7c792d00ed262d1c1e 78105492 chromium_149.0.7827.196-1~deb13u1_i386.deb Files: 3d41c493aa389428e31ff1f2a2eb0a2e 5318596 debug optional chromium-common-dbgsym_149.0.7827.196-1~deb13u1_i386.deb fe710f7c31ef254232df74ffbe693143 26235108 web optional chromium-common_149.0.7827.196-1~deb13u1_i386.deb 99ef8ad67c6d7af35e9de2a60e35f8e7 36228036 debug optional chromium-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 1ddebabb82c59267523a59961c80a198 8116504 web optional chromium-driver_149.0.7827.196-1~deb13u1_i386.deb eab5347ce7bb67de1661a5b8e23b0809 29807120 debug optional chromium-headless-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 1d1c710682c765be453cba5a57bd6d4f 59811372 web optional chromium-headless-shell_149.0.7827.196-1~deb13u1_i386.deb cb2649b8bf5ae704184f5619526530f0 18984 debug optional chromium-sandbox-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 27f37aa440f2e45a2755eafa67bba926 125924 web optional chromium-sandbox_149.0.7827.196-1~deb13u1_i386.deb 90f18ebf7f13218f69523bf31fd2c515 32733724 debug optional chromium-shell-dbgsym_149.0.7827.196-1~deb13u1_i386.deb 03bd2693e021acca457ebfebf580ff9f 65578636 web optional chromium-shell_149.0.7827.196-1~deb13u1_i386.deb 7d7de6530f9ff6f11a927f4491f544c8 30618 web optional chromium_149.0.7827.196-1~deb13u1_i386-buildd.buildinfo 1b5ea8a71a2032ad50d75fe4ba497c2a 78105492 web optional chromium_149.0.7827.196-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmo9Xa4ACgkQYg9P9sm2 dfEvQQ/+JbFB04PQsUFG+Dvu4BUGhABJjB1/cLrc1MDysm9nnPDotnUqYkNIvMaE v4vLaltFIXr2TIsL6VwyHFjjnIXZWxeSjV6wn8Eqvmc20ZK0KphmYVPMpQzdD36j 4UxwioCAtPSj3sBEK7uz/RqspzGTg+zc//lzYOWkBRDGU18FybyEgxi8sKLh/yO+ AW/kzv2bCT+Y76eVQB79eee2zusUPc1klVYAjZKfLFqj6tifnmXc8ijJZn9kOWct Oo40niVLrz7TLu9u1UAAm0lbfNRjBTxFiTjLWQg/LbEbfzgtML8NNLclg/+J0ue1 sBX9q1os4ju0w1Sbi29I0w9xjkD771DtMZBHUQSj3DqRv7TCho3oIF31eKRCSUlC 6X6nPNCtgSEjd6DFDwW0dEqLZPxhYZIKaojdPMETpuix2MULJT5qLPzB6HB6+9BP i/8EwDDyh6bdLOaEedc/satx+5uJJoCaHoYG5Umd6x2SoAEXMPa62xSPsSNxby+3 vFB/7CIjyWY9vlSB42LxgxXgHHmOiGsykXlOWA1hLXJ0i1lYwTGSO60oCIn0Dg0w b0RSsJVAETWWsv/m1CkSLYqOxiuJ7EMQB9AMCMuP/geVg5QIeXFIJi5m9RAC3r9s FhL1lf67LAIWxmyAg/PnNMtK3pXyyrJdhLwd9MuwTLCs1uUFx9w= =wqYj -----END PGP SIGNATURE-----