-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 17:31:48 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 154.0.8037.57-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1135653 1146746 Changes: chromium (154.0.8037.57-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-95350: Buffer overflow in ANGLE. Reported by Billy Jheng Bing Jhong, Muhammad Alifa Ramdhan, Pan Zhenpeng of STAR. - CVE-2026-95357: Out of bounds write in GPU. Reported by Anymous. - CVE-2026-95339: Use after free in ServiceWorker. Reported by Andrew Boni. - CVE-2026-95281: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd. - CVE-2026-95313: Use after free in Fullscreen. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95349: Buffer overflow in WebGL. Reported by Google. - CVE-2026-95284: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan (STARLABS SG). - CVE-2026-95322: Out of bounds write in GPU. Reported by David Sievers (@loknop). - CVE-2026-95329: Out of bounds write in WebGL. Reported by Google. - CVE-2026-95356: Use after free in WindowDialog. Reported by Xinyang Ge. - CVE-2026-95310: Use after free in AdFilter. Reported by Xinyang Ge. - CVE-2026-95301: Missing authorization in Extensions. Reported by OGINOME Tomohito. - CVE-2026-95291: UI misrepresentation in SecurityIndicators. Reported by NH DEV. - CVE-2026-95355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-95315: Use after free in Aura. Reported by Google. - CVE-2026-95298: Use after free in Browser. Reported by Google. - CVE-2026-95372: Use after free in Chromecast. Reported by Google. - CVE-2026-95324: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95283: Buffer overflow in Tint. Reported by Google. - CVE-2026-95293: Uninitialized resource in GPU. Reported by TienPA - NGS Holdings. - CVE-2026-95274: Improper output encoding in DevTools. Reported by Google. - CVE-2026-95282: Use after free in Platform. Reported by Google. - CVE-2026-95373: Use after free in DevTools. Reported by Google. - CVE-2026-95277: Use after free in Views. Reported by Google. - CVE-2026-95348: Use after free in Bluetooth. Reported by Google. - CVE-2026-95335: Use after free in HID. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95338: Use after free in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722). - CVE-2026-95318: Buffer overflow in Video. Reported by alex.laboirie. - CVE-2026-95286: Type confusion in Bindings. Reported by @bean5oup. - CVE-2026-95365: Type confusion in IndexedDB. Reported by HoneyBee. - CVE-2026-95343: Use after free in WebAudio. Reported by HoneyBee. - CVE-2026-95280: Race condition in V8. Reported by Google. - CVE-2026-95304: Out of bounds write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95306: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95299: Use after free in GPU. Reported by Google. - CVE-2026-95351: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-95287: Missing authorization in Navigation. Reported by Google - CVE-2026-95366: Use of released resource in Core. Reported by Google. - CVE-2026-95382: Improper input validation in Auth. Reported by Google. - CVE-2026-95381: Improper input validation in Printing. Reported by Google. - CVE-2026-95331: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-95297: Missing authorization in Contextual Tasks. Reported by Google. - CVE-2026-95375: Incorrect authorization in BrowserTag. Reported by Google. - CVE-2026-95302: Incorrect authorization in WebAPKs. Reported by Google. - CVE-2026-95362: Cross-site request forgery in DevTools. Reported by Google. - CVE-2026-95369: Inappropriate implementation in XML. Reported by Google - CVE-2026-95376: Externally controlled reference in DevTools. Reported by Google. - CVE-2026-95359: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95294: UI misrepresentation in Browser. Reported by Google. - CVE-2026-95337: UI misrepresentation in Messages. Reported by Google. - CVE-2026-95346: UI misrepresentation in Chromoting. Reported by Google. - CVE-2026-95320: Missing authorization in Navigation. Reported by Google - CVE-2026-95317: Incorrect authorization in MediaCapture. Reported by Google. - CVE-2026-95345: Use after free in Actor. Reported by Google. - CVE-2026-95330: Improper state validation in Downloads. Reported by Google. - CVE-2026-95370: Inappropriate implementation in NFC. Reported by Google - CVE-2026-95303: Incomplete cleanup in SmartCard. Reported by Google. - CVE-2026-95360: Race condition in Editing. Reported by Google. - CVE-2026-95295: Information leak in Mobile. Reported by Google. - CVE-2026-95276: Improper input validation in Themes. Reported by Google - CVE-2026-95314: Incorrect authorization in HID. Reported by Google. - CVE-2026-95371: Missing authorization in Views. Reported by Google. - CVE-2026-95353: Use after free in Bindings. Reported by Google. - CVE-2026-95363: UI misrepresentation in FileSystem. Reported by Google. - CVE-2026-95341: Improper input validation in Desktop. Reported by Google. - CVE-2026-95354: Use after free in Verifier. Reported by Google. - CVE-2026-95384: Race condition in Transactions Platform. Reported by Google. - CVE-2026-95336: Information leak in Transactions Platform. Reported by Google. - CVE-2026-95290: Missing authorization in NFC. Reported by Google. - CVE-2026-95325: Use after free in ANGLE. Reported by Google. - CVE-2026-95275: Incorrect reference resolution in MediaStream. Reported by Zabith Mohammed (@nmzabith). - CVE-2026-95374: Incorrect authorization in Network. Reported by NH DEV. - CVE-2026-95300: Missing authorization in DevTools. Reported by Google. - CVE-2026-95321: UI misrepresentation in Payments. Reported by jodyritonga. - CVE-2026-95323: UI misrepresentation in Chromium. Reported by Wihdatu Nuuro Ahmadi. - CVE-2026-95332: Use of uninitialized variable in Tint. Reported by Google. - CVE-2026-95312: Information leak in Passwords. Reported by Google. - CVE-2026-95344: Race condition in DevTools. Reported by @bean5oup. - CVE-2026-95289: Incorrect authorization in Scroll. Reported by Vu Van Tien (@n0_Be3r). - CVE-2026-95347: Use after free in Updater. Reported by a45hif. - CVE-2026-95311: Free of non-heap memory in Fonts. Reported by Google. - CVE-2026-95358: Incorrect authorization in Mobile. Reported by Google. - CVE-2026-95333: Use after free in Metrics. Reported by sean geofrey. - CVE-2026-95307: UI misrepresentation in ExtensionsMenu. Reported by Hafiizh. - CVE-2026-95285: Missing authorization in WebView. Reported by Google. - CVE-2026-95278: Missing authorization in WakeLock. Reported by Google. - CVE-2026-95327: Information leak in Networking. Reported by Google. - CVE-2026-95334: Incorrect reference resolution in WebProtect. Reported by Google. - CVE-2026-95308: Integer overflow in Metrics. Reported by Google. - CVE-2026-95292: Incorrect authorization in Safebrowsing. Reported by Google. - CVE-2026-95352: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95279: UI misrepresentation in Omnibox. Reported by Google. - CVE-2026-95367: Information leak in DataTransfer. Reported by Google. - CVE-2026-95385: Inappropriate implementation in PlatformIntegration. Reported by Google. - CVE-2026-95368: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95319: Use after free in Printing. Reported by Google. - CVE-2026-95326: Incomplete cleanup in Bluetooth. Reported by Google. - CVE-2026-95309: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95361: Confused deputy in DevTools. Reported by Google. - CVE-2026-95288: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95380: Type confusion in V8. Reported by Google. - CVE-2026-95342: Missing authorization in V8. Reported by Hongwei Li, Zhun Wang, Ziyue Pan, Junmin Zhu, Saastha Vasan, and Wenbo Guo. - CVE-2026-95296: Missing authorization in Core. Reported by Quyền Sơn (@zer0qs1337). - CVE-2026-95316: Unchecked return value in Performance. Reported by Google. - CVE-2026-95328: Confused deputy in Mobile. Reported by Google. - CVE-2026-95340: Incorrect authorization in PictureInPicture. Reported by Google. - CVE-2026-95364: Improper input validation in Passwords. Reported by Google. - CVE-2026-95305: UI misrepresentation in Chromoting. Reported by Google. * d/control: - remove generate-ninja build-dep. - stop recommending chromium-sandbox (closes: #1135653). * d/copyright: stop deleting tools/gn/. * d/rules: restore old code that builds the bundled version of generate-ninja as part of the chromium build. Upstream keeps using brand new gn features (sometimes not even available in sid yet) and we're carrying too many patches to work around that. * d/patches: - debianization/pre-gen.patch: rework clang argument filtering due to upstream changes. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - llvm-22/clang22.patch: refresh. - ungoogled/disable-ai.patch: sync from u-c - ungoogled/disable-mei-preload.patch: sync from u-c - ungoogled/disable-privacy-sandbox.patch: sync from u-c - fixes/crubit.patch: drop - system/rust-cbor.patch: drop - ungoogled/crubit.patch: add a patch pulled from u-c, which includes stuff from fixes/crubit.patch and system/rust-cbor.patch.. plus more. - ungoogled/verification-tokens.patch: add a patch pulled from u-c to fix a build failure related to private verification tokens. Two week release cycle is awesomesauce. - fixes/tsc-split-comp.patch: add a build fix for debian's typescript. - ungoogled/disable-ai-search-shortcuts.patch: add patch to disable the new AI button and the @gemini/@aimode shortcuts (closes: #1146746). - trixie/gn-string-hash.patch: drop, no longer needed with bundled gn. - trixie/gn-len.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-module-name.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-unused-vars.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-funcs.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - bookworm/gn-revert-path-exists.patch: drop, no longer needed with bundled gn. - bookworm/foreach.patch: drop, no longer needed with newer clang [sid, trixie]. . [ Timothy Pearson ] * d/patches/ppc64le: - fixes/fix-rust-linking.patch: refresh for upstream changes - third_party/0002-regenerate-xnn-buildgn.patch: refresh for upstream changes - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: refresh for upstream changes . [ Daniel Richard G. ] * d/deb_pre_gen.py: Handle new arg signature of generate_css_js_files.js, and the new run_with_restat.py script; also streamline regexes a bit. * d/patches: - debianization/pre-gen.patch: Handle run_with_restat.py script, and neuter run_with_stamp.py. - trixie/gn-unused-vars.patch: Refresh. * d/rules: Set njobs for the init-pre-gen target for a faster GN build. . [ Jianfeng Liu ] * d/patches: loongarch64/0020-user_agent-add-loongarch-architecture-support.patch: refresh for upstream changes Checksums-Sha1: 5a8019c54d05355163c4c939e4eab0a0c21995f7 2200016 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_i386.deb ecae908851f53371a07bd0ed2c595a5e40012a86 30722096 chromium-common_154.0.8037.57-1~deb13u1_i386.deb 822f85ffa88591cb23275ceaff4281308346b924 35294276 chromium-dbgsym_154.0.8037.57-1~deb13u1_i386.deb d7a5971eb132dad916fa14d370bfbb2e6d38f63c 8830096 chromium-driver_154.0.8037.57-1~deb13u1_i386.deb dcb078a865a9bea5a5d1d1809d2df6886fef122f 28330028 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 7a5193eeed606ecf9ced3a2435294597e8af67f7 62296008 chromium-headless-shell_154.0.8037.57-1~deb13u1_i386.deb 970f17f291b69c7c1c4b8f44f51708b10858ee38 19184 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 71ac203c5a04537e252859f2839f6e3d6ede5434 150968 chromium-sandbox_154.0.8037.57-1~deb13u1_i386.deb 86fb8a6d2debfc1417041ad220ae7b1baadd9162 31313452 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb ef6127c6cc67e71d782334f161c5a87a33419520 68559012 chromium-shell_154.0.8037.57-1~deb13u1_i386.deb f03509ea03debb5562f09d2daf27038acc8ec774 31393 chromium_154.0.8037.57-1~deb13u1_i386-buildd.buildinfo da9e637344c616bac9f88ce218be5e8d7b0bbca8 82403096 chromium_154.0.8037.57-1~deb13u1_i386.deb Checksums-Sha256: e2d2149bff0dbf8430308d546696d45d1509d9cc0f6a9cd7ce7117247e78c8b9 2200016 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_i386.deb c8c4f64c0fb50bf53f2656932fadc512cc2acbfda455e882fc76c4928c15249d 30722096 chromium-common_154.0.8037.57-1~deb13u1_i386.deb 9b65178eb659222d566800eb09bef578dca649c42e1bc91112bfbf7d1a53f569 35294276 chromium-dbgsym_154.0.8037.57-1~deb13u1_i386.deb a292708bac896657a75ec22266fae23bb41a86ebba63b787b157f17dfecee266 8830096 chromium-driver_154.0.8037.57-1~deb13u1_i386.deb 4c50dc2760688ff9dadf88fe32b7e974fae0e66fa33a42543ca3fbda895db079 28330028 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 9fe83c8ff323f49114b8c5fe744f1ff9fa56dc3308004aac47155a4234d11791 62296008 chromium-headless-shell_154.0.8037.57-1~deb13u1_i386.deb 7314313686429560ffe686b9fe276c60b5911885238f11559963ecaa3a9df9fe 19184 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 49432cd704831029e5f6a850b482c7b5ac054bc808c7c19c381a31a3fcc29dce 150968 chromium-sandbox_154.0.8037.57-1~deb13u1_i386.deb d911d284e4efb0fb66988a4bb6ebc70f796753b38ade9ef587b3071a4afdae43 31313452 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 6a9995ca8b12d2aa35ac5174ec530b3064fcc2337bb87f3dd0e6926125a62f7b 68559012 chromium-shell_154.0.8037.57-1~deb13u1_i386.deb db1c682c4a245e5c60919d0365f17b431f978a1c1e22762af369fcf0c0d6c1ca 31393 chromium_154.0.8037.57-1~deb13u1_i386-buildd.buildinfo 5b212d70ae62a0400b15d82d5f8b07279b1764220548220947ef4621ee75f92e 82403096 chromium_154.0.8037.57-1~deb13u1_i386.deb Files: 2e30a868ac1eeabcbe0de61c9df26ef7 2200016 debug optional chromium-common-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 0830f303ed0286494482c5b55be4a87a 30722096 web optional chromium-common_154.0.8037.57-1~deb13u1_i386.deb dc1d89f498649ae0374ea3bbc30ff04c 35294276 debug optional chromium-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 41cf1d62bc57929498ab7634bbe6a93a 8830096 web optional chromium-driver_154.0.8037.57-1~deb13u1_i386.deb 5ea42d30542e4e9aeebf66f3a5875017 28330028 debug optional chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb e98bd89879cd7aa4cfc22f311c3d75e1 62296008 web optional chromium-headless-shell_154.0.8037.57-1~deb13u1_i386.deb 8841db6ba7c2f491ffaa1acb8d7b3448 19184 debug optional chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_i386.deb bfdb0c0abc756b5b5f34209fbe5abc00 150968 web optional chromium-sandbox_154.0.8037.57-1~deb13u1_i386.deb 3520dffb36e227cad98aa87f9ffedee8 31313452 debug optional chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_i386.deb 32af6e8c0d2ef5ac6587341fcb61de4b 68559012 web optional chromium-shell_154.0.8037.57-1~deb13u1_i386.deb 7e5bf610cce04d39b1ce4f0eb046ec09 31393 web optional chromium_154.0.8037.57-1~deb13u1_i386-buildd.buildinfo e4d874057592ccf24440d90473f466d5 82403096 web optional chromium_154.0.8037.57-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmq23iEACgkQGNGWmfrq ILG1vA/+On9dlMlEhU+FiSoo83OY/gRONKQAhoNjzWCl0zLdDxLHiv82My7meXtO 7NuZDFaC6BpuvkdQqGMsXjahMnWhvOScz3N3lcf9O9CVhf2NApjjF3g+Gx+AjalU rgFGGDoOWCIJSre/xRRLEmejEMjFly49FkATefbrgYRekovrdC0+m++H+WHqCOp9 qrZ5Th6W1aFfqlg3PUqbArIsHQvqFXIhx+ZRftW/tETZW2aqAPMQa0hRZ1RPfj6k Zj2Ze3az7XEnMBUPX32kfXyWx81UeFJfZk8lPcgPS8/ODSdMOCdV8rs+KLhjNcZO IpEjKwzxvfyFQNsp+KWNBtHWtppCNoIsRpg2aj7zpHuEzL4iOFoXSCO1XzeSh9/I U4RT1q3Klj06Y1T5ulKoN8gsonJW/PEmtRVFKwCPLA5T4t5VZWJEUAweq2NFG9hs tlzhrfqD1/d5BBnS/KyTyJixGqYNPAZQDMydixKwe8qMP7K63UYbw1VOyiOwVR7Q 3MHmUFw3zYvqPBKAFkFDrrYi1OYPfjp0RvkYClf64So6016a9Np1hyFSFBFiAF/i GVTOc5ABK0xeKhRGa6SxSe6JoboZOdBDe0SOr3lRf9trWRyi2UO9a6kaksUlKRnT xZ8pvzFylhI2kBG/Tlh0SGLhVBP/JdFrSuyv51gdUmXEewaLXWc= =FQmX -----END PGP SIGNATURE-----