-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 18 Sep 2026 01:16:02 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 153.0.8010.52-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (153.0.8010.52-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer. - CVE-2026-93372: Buffer overflow in WebGL. Reported by Google. - CVE-2026-93375: Incorrect reference resolution in Tracing. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-93382: Use after free in PDFium. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-93387: Improper state validation in Skia. Reported by Google. - CVE-2026-93373: Use after free in Extensions. Reported by Google. - CVE-2026-93381: Buffer overflow in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722). - CVE-2026-93379: Incorrect authorization in ORB. Reported by OGINOME Tomohito. - CVE-2026-93377: Type confusion in V8. Reported by Google. - CVE-2026-93380: Race condition in FileSystem. Reported by Google. - CVE-2026-93384: Server-side request forgery in Omnibox. Reported by Google. - CVE-2026-93383: Information leak in Permissions. Reported by Google. - CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google. - CVE-2026-93378: Missing authorization in Storage. Reported by Google. - CVE-2026-93385: Information leak in Paint. Reported by Google. - CVE-2026-93386: UI misrepresentation in WebAppInstalls. Reported by Google. Checksums-Sha1: ed0390bfe2fc4af7c22c77c416b03262e5e00c7b 2211168 chromium-common-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 6f8ab52f7c3f5190195a16de0bbbb010647c066a 30952444 chromium-common_153.0.8010.52-1~deb13u1_i386.deb 37407117602aa50e552d0346f4acb3a8674987b4 35267988 chromium-dbgsym_153.0.8010.52-1~deb13u1_i386.deb ce3f6c60424ff42e4e4f4344c69bcc66831199f9 8787628 chromium-driver_153.0.8010.52-1~deb13u1_i386.deb e2460d3fa1587b43f63787cf8be7d666bf6691fe 28260832 chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 40d63356bc6ce4ecffdaa4e751005432b36568be 61639964 chromium-headless-shell_153.0.8010.52-1~deb13u1_i386.deb 6ef2b18efdd25062f9da5ec3d437344746fb1ce3 19184 chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 693d8853befb7b8ddfad07e9b8bb6a453a583983 148744 chromium-sandbox_153.0.8010.52-1~deb13u1_i386.deb 587473196c039af02a8bc433d695a4016238a75c 31236100 chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb c1e566489a5e22f15fff083af932acfb6186c98a 67835204 chromium-shell_153.0.8010.52-1~deb13u1_i386.deb b861c5e3b253697ca66a8c0cd1cab34754fe306c 31440 chromium_153.0.8010.52-1~deb13u1_i386-buildd.buildinfo 5e63f2a5dd662b50d61f0500cc4673020426b4b8 82001540 chromium_153.0.8010.52-1~deb13u1_i386.deb Checksums-Sha256: 118927c48de0aa60adf61b70e6277c3fd704c24fe03d07dbf8ed6bf00f7085e2 2211168 chromium-common-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 3707fd9d59cbd668961bd6f1346c6b379c473d998170f4a0bf98189511abe29e 30952444 chromium-common_153.0.8010.52-1~deb13u1_i386.deb b5132d4bbb14caa471179a7aef420e8944c75b0d898f221d281a990925968e8d 35267988 chromium-dbgsym_153.0.8010.52-1~deb13u1_i386.deb fe5501ae5d3151bb373f316c4c4f565740c00cf44a01a7860f4d282d1cbf4e9a 8787628 chromium-driver_153.0.8010.52-1~deb13u1_i386.deb d2934a4bee241514d51c6c2537982792ae9dfd497ab240be0ca1e1c307c33dde 28260832 chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 8fb6c5614cf5228fe3cb4f1a49306fb6602d1ab5aea0128e249dca9e5c2212ed 61639964 chromium-headless-shell_153.0.8010.52-1~deb13u1_i386.deb 147ea41d95e089c7ab34c9b79cc66241462ca371f7dc4c93a3ef0be6802bcc97 19184 chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_i386.deb dbfaa3a406704dcf182d58891da92beb37e1c7beae3489a40146a560edcb9240 148744 chromium-sandbox_153.0.8010.52-1~deb13u1_i386.deb 0d0b49a9771ea39f3dce0835b8139531eb7c1e515be013e847e84f874930a28c 31236100 chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 273f7ccaa60bcb48fac6d55ac11857f5c5b4160e045baf644f676244d344fc7f 67835204 chromium-shell_153.0.8010.52-1~deb13u1_i386.deb bf1891e28b001698ca30054b1bb61ff538e2f29f8a32474580ca2a1853642f96 31440 chromium_153.0.8010.52-1~deb13u1_i386-buildd.buildinfo 93352d5c9f24d4423b78c0cf6757caa36424b015edbe1f2a05b1f7293527e18c 82001540 chromium_153.0.8010.52-1~deb13u1_i386.deb Files: ac47d671befa0bbc7efbb3d49d069a82 2211168 debug optional chromium-common-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 307ee599c859150b8410a53264e658e3 30952444 web optional chromium-common_153.0.8010.52-1~deb13u1_i386.deb af9addc8989b1811ba6684c6d86d689f 35267988 debug optional chromium-dbgsym_153.0.8010.52-1~deb13u1_i386.deb a4a9db3916706e38c43af2f6faae2b0d 8787628 web optional chromium-driver_153.0.8010.52-1~deb13u1_i386.deb d6f40af138a687a37e54c6ec447a3131 28260832 debug optional chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 8d09a59f1e054d79440d86b2b974679c 61639964 web optional chromium-headless-shell_153.0.8010.52-1~deb13u1_i386.deb 5f41dd9e1042e2d78011ee3e8d68bc06 19184 debug optional chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 0d765db4f9d7b23df79f36fc1d3a5510 148744 web optional chromium-sandbox_153.0.8010.52-1~deb13u1_i386.deb 0825e444c08a61b39c3f4c06da6f4011 31236100 debug optional chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_i386.deb 7edcfb38fd7b0153292006b848545770 67835204 web optional chromium-shell_153.0.8010.52-1~deb13u1_i386.deb e8738ba33a591ad138fbbfec54239f12 31440 web optional chromium_153.0.8010.52-1~deb13u1_i386-buildd.buildinfo 5f325e66aa1ea0883c5367afdc0fa560 82001540 web optional chromium_153.0.8010.52-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmqvQOQACgkQf2INRiCd aWLFCRAAntXOMFNI3SCSl9inDmTTQuO6h0DGtROy57r7maK+8ISVsk4faiYRPpZ0 jNfzvlOWcmsocTldNa+F1MDKx4ZNwpoynF6H7GzbRUaMg2npHl90tRJUCjWvbXn2 rGe9xubH7Z4o6K9RsgyuMnIiFmzW93mMVwrQ+oe1lNdFRI/Qy6sId4zV6rOqYzET V3Yxe/abhP47ip6TcipjlEOc2NcgU+07B9tRCDZ0eDrKV7PZsCGmF0HDQCvsJUzE B5Saol5mouoKJvlKWP6lLXOx/flGdQHFgpAA53ymo7INWXGlaAfJVh1la+6Z6vVT bdifRYP9jOsf3FSW5CAy7RK24ICKm9oMSzDZVS58ztIIPMDw7jqVFai5ET1O9n6A xpO1PQH5r5/+3abYucL6PxTBniZnrOQqH9SdHydMOjxDVKHR8NDjLTO6955VUQfy N9YtiRqOKwP5+aWL4Xolyhoi4RlhQeNXPGSuyreKIMQDbKu1VZ1RE6Eqihsx+pXK W+H2LULli31O7Fo7Of9pkNlhcT4NK7MgBXvapfD4nnjxkYzy5YVc8MOKo0stG/60 9/7UaGt0A5voVRFiazoKUtNM/A/VA8o0Qey+hESUAn1mTyFtIllk2LU7HxJeyWAy xfM8O3svXlYql0Sa1F9qMKMkdVJMz7xdFfz4Bn2XzKt3cDYVQQs= =sIhg -----END PGP SIGNATURE-----