-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2026 14:22:49 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 152.0.7977.75-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (152.0.7977.75-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-84353: Use after free in Shared Tab Groups. Reported by Google. - CVE-2026-84352: Use after free in WebGL. Reported by Google. - CVE-2026-84354: Incorrect authorization in FileSystem. Reported by Google. - CVE-2026-84359: Information leak in Skia. Reported by Google. - CVE-2026-84357: Improper input validation in Omnibox. Reported by Google. - CVE-2026-84324: Use after free in Proxy. Reported by Google. - CVE-2026-84349: Use after free in Browser. Reported by Google. - CVE-2026-84326: Uninitialized resource in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-84333: Use after free in Dawn. Reported by Google. - CVE-2026-84351: Buffer overflow in GPU. Reported by Cassio Lima. - CVE-2026-84325: Improper input validation in DataTransfer. Reported by Google. - CVE-2026-84328: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84347: Use after free in WebRTC. Reported by Google. - CVE-2026-84323: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-84358: Improper privilege management in Downloads. Reported by Google. - CVE-2026-84332: Incorrect authorization in SiteSettings. Reported by Google. - CVE-2026-84330: UI misrepresentation in FullScreen. Reported by Google. - CVE-2026-84334: Incorrect authorization in Chromoting. Reported by Google. - CVE-2026-84348: Information leak in MediaCapture. Reported by Google. - CVE-2026-84335: Incorrect authorization in TabStrip. Reported by Google. - CVE-2026-84327: Incorrect authorization in Autofill. Reported by Google. - CVE-2026-84329: Confused deputy in CredentialProvider. Reported by Google. - CVE-2026-84356: UI misrepresentation in FullScreen. Reported by Francesco Topol (k4tedu). - CVE-2026-84350: Use after free in TabStrip. Reported by Google. - CVE-2026-84331: Incorrect authorization in Actor. Reported by Google. * d/control: bump rustc-web build-dep versioning up to 1.96, now that we have that in bookworm-proposed-updates. * d/patches: - trixie/rust-no-alloc-shim.patch: drop, no longer needed with newer rust. - trixie/rust-sanitize.patch: drop, no longer needed with newer rust. - debianization/rust-disable-debugsym.patch: add --no-mmap-output-file to link flags (another attempt to reduce armhf memory usage). - rust-1.85/jxl-simd-avx512.patch: drop, no longer needed with newer rust - rust-1.85/jxl-features.patch: drop, no longer needed with newer rust. - rust-1.85/parsing.patch: drop, no longer needed with newer rust. - rust-1.85/image.patch: drop, no longer needed with newer rust. - rust-1.85/rust-is-multiple-of.patch: drop, no longer needed with newer rust. - rust-1.85/file_as_c_str.patch: drop, no longer needed with newer rust. - rust-1.85/mojo-features.patch: drop, no longer needed with newer rust. - rust-1.85/zip8.patch: drop, no longer needed with newer rust. - rust-1.85/std-from-utf8.patch: drop, no longer needed with newer rust. - rust-1.85/let-chains.patch: drop, no longer needed with newer rust. - trixie/adler1.patch: drop, now that we have a newer rustc-web in bookworm. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Exclude a couple of targets from the pre-gen process as making them causes files to be written to the source tree. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Fix FTBFS on ppc64le systems due to FFmpeg patch update. Checksums-Sha1: 0d48b270a4a5ee6b0ca8e82b89cd52458c211aa9 4168092 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb ce793300405a31ad9ab477e574590880aa75c00a 30207312 chromium-common_152.0.7977.75-1~deb13u1_amd64.deb 1894538113d51e86e183efac8470e066f0732d78 34040516 chromium-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb e586e98180b9e556a2db07fc7009caa1f6fcdf70 8056068 chromium-driver_152.0.7977.75-1~deb13u1_amd64.deb 8acdbe5fe3e732abb24cb7c04056db5eb011900b 28533732 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb fc07afadd6a9462b9df5d6574c7c74aced8351b9 64988720 chromium-headless-shell_152.0.7977.75-1~deb13u1_amd64.deb bcd74c08acbbf1cb4049b168a2ce20a6947b7a41 20248 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 8d64dbba024000658b003d0400ad98c314b71a01 144148 chromium-sandbox_152.0.7977.75-1~deb13u1_amd64.deb 63765bb6c6bdb86ef85e80bdb576f214ed39fa79 30184404 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 9e06495e4c47573019351c541ce863f5b0d0a84c 64423232 chromium-shell_152.0.7977.75-1~deb13u1_amd64.deb 3cff3e759b7b7589e856cd56aaa6a678af8d9ae4 31425 chromium_152.0.7977.75-1~deb13u1_amd64-buildd.buildinfo c9630349b63b6ab44ba6b4eff12efb75aac79d72 89071100 chromium_152.0.7977.75-1~deb13u1_amd64.deb Checksums-Sha256: 1b5fcf34fb2ac83688d1e591a50d9c44649ea10430559e40c01aa90768ca4111 4168092 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 5c70468e4381eb5450600429de7ebc041345edecab63e4779a52c891a7acc8da 30207312 chromium-common_152.0.7977.75-1~deb13u1_amd64.deb 0af0f3f0ac7641fc4f6631e3e33f1361a2e4a630aaea41fe358f0f7881aa78e9 34040516 chromium-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 6b8f36703e4ab3add8aa56893a7290e614c3316e8309a77be5391b88eff61e0b 8056068 chromium-driver_152.0.7977.75-1~deb13u1_amd64.deb f3fa760cfb87d0c49b67e5ee52235fa8f86f8991a40660ebed132c72efd30262 28533732 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 86e225910b64c1d269f8e3c703ea269186fb6799c2e1bfeded39b5dfd069903f 64988720 chromium-headless-shell_152.0.7977.75-1~deb13u1_amd64.deb a05318b3a9007eb56ec9c654822146fb78d7369a41eed1c26de358bbb71b12c0 20248 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 0deb9ddea193365b9fcf2cd1c799da755fcdde31c8ecc2bb6a07f31c55584e2b 144148 chromium-sandbox_152.0.7977.75-1~deb13u1_amd64.deb 4a4a84aaa89b291b9ed6398d7105df39682ce1575207088476f43ca8f52783af 30184404 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb f336bd8d6de8f86363a78c23db46bec251ed5a68f842a79d7998f440f09d478e 64423232 chromium-shell_152.0.7977.75-1~deb13u1_amd64.deb e91f9d4f609ff213b13f0f64d6608bbd7053d7ed0940e1b66b046aa672884cd0 31425 chromium_152.0.7977.75-1~deb13u1_amd64-buildd.buildinfo b16ac8773ba46c2ec823d60bdd7534157836beb4273286336af7d827d373630f 89071100 chromium_152.0.7977.75-1~deb13u1_amd64.deb Files: e6ee2ea771643fc7e07b00b964eee80a 4168092 debug optional chromium-common-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 9976f8397a67a52577df4b6bd03e385d 30207312 web optional chromium-common_152.0.7977.75-1~deb13u1_amd64.deb a38604551030808e891e8a5f4dc3005f 34040516 debug optional chromium-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb af5c47d591ddf0afd26052a4b10070a1 8056068 web optional chromium-driver_152.0.7977.75-1~deb13u1_amd64.deb 8e57c3cdea78d3b629b3030b2d3e5cfb 28533732 debug optional chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 9127353437f723349006f6190b893c8b 64988720 web optional chromium-headless-shell_152.0.7977.75-1~deb13u1_amd64.deb b420b0d63761cb82bfe785b9112b182d 20248 debug optional chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 7e4f83b913cf3520cb0ac0d4e6da98db 144148 web optional chromium-sandbox_152.0.7977.75-1~deb13u1_amd64.deb 06336945e725923f35ebf7752ff5e95a 30184404 debug optional chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_amd64.deb 5806d7b7ca44ecb4d0c65f429e54915a 64423232 web optional chromium-shell_152.0.7977.75-1~deb13u1_amd64.deb 21151f5018d6f79d8e5759a089168499 31425 web optional chromium_152.0.7977.75-1~deb13u1_amd64-buildd.buildinfo 54e75f477bc84758d960dbfde22bf4bc 89071100 web optional chromium_152.0.7977.75-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmqZilUACgkQTwt/65ON 6zefYxAAr7fwCbTXddY1Z2ITghjZyzBp45TtdkdRojZNKpM58QkULv+yKR1bPPAF 4KWr2mdY+y+8JEFELW2Ra49MpRKLEbEGEvuPOo8ZT6AaLJRPXqiY6pfnEzaibSix pRgYYr2URCKwi9gbfAsYjSQ3C/MPXTGhdPd1z0XbkV7bOYf75EfEFtxwF2pkDNU7 WjNHkNQO3DYIUZo5234hwkmiCzoMIa3vjEuVhJyqb51oY9FNKDhRozOWgeznGHxg K62NBu1TdVVj0CbpZyAY/LTs0OVRPgNZmG904yOLNGfrYhOoJt3m1DTlIyxIVqbo J55JlDUwO5cti1vk2Y0IXeMzrdX4iZQ7DdnzV9/J7EM+1wYdI2E2AUEY7GLoNzHI htSA9O0xEz0MUESkv4pUluPN4U29L2PNxK6qjKwTzz92GO8pzLC+f8LBZm/i8fXR GdMIPHW95/Bi5+j9oarILRdtNJD7u0t1gUJCljlXb5iRbl+J4xu/aeGZFguNEDSy cwI//c88j5loaWweYocfFaRfWxGalmIqizY4giDB03JUS/54P5+R+FsOSHislTnV 0RL41EmkB5SjjORVen8WvmGvAeV1+MZhsvDNi1Rhm7bM+0pocUrnyCS6a9OXZVXI MvYKYxW1ngaeEg+klaM8HrBdQoyboOcfN8BGiMoaMFHWaPiL8aU= =idVg -----END PGP SIGNATURE-----