-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 03:47:05 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 154.0.8037.92-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (154.0.8037.92-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx. - CVE-2026-102317: Improper privilege management in Mojo. Reported by Google. - CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga. - CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google. - CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni. - CVE-2026-102306: Use after free in Bluetooth. Reported by Google. - CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google. - CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102303: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102311: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security). - CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey. - CVE-2026-102325: Uninitialized resource in Skia. Reported by Google. - CVE-2026-102308: Use after free in Views. Reported by Google. - CVE-2026-102301: Out of bounds write in GPU. Reported by Google. - CVE-2026-102319: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt. - CVE-2026-102318: Out of bounds read in WebGL. Reported by Google. - CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec. - CVE-2026-102315: Uninitialized resource in Media. Reported by Google. - CVE-2026-102302: Buffer overflow in V8. Reported by Google. - CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint. - CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous. - CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact. - CVE-2026-102327: Incorrect authorization in WebView. Reported by Google. - CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google. - CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google. - CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google. * d/patches: - disable/omnibox-ai-mode.patch: add patch that *actually* removes the AI Mode button from the new tab page's omnibox. Checksums-Sha1: 7e5f4438b7a0b517dad61bad98593bf0ebcc4808 2198048 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb bb6abdb67e511d026959c3bb2a3db84b6e1a7355 30604900 chromium-common_154.0.8037.92-1~deb13u1_amd64.deb 73d92ef7aeb092c8d85c834ae996fcc7eb569305 32243956 chromium-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 9d666698b6f87df32bdd4740bbcea9cc707b246c 8471280 chromium-driver_154.0.8037.92-1~deb13u1_amd64.deb e72be8728186ba43dac93a7471ddd5ea170c1ac0 26576544 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb b55fb70078bed969d41037955a48b865b60670ba 66281032 chromium-headless-shell_154.0.8037.92-1~deb13u1_amd64.deb 1fea6eb17dd685542552cb11b449ae551c085fae 20260 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb a9108cabe2ea457967541430fdfbb81457dd089e 151496 chromium-sandbox_154.0.8037.92-1~deb13u1_amd64.deb 149c3f71930584fbbd056de7f7dca02e050879ea 28269268 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 7f0335c17842a0323bf72db82bdad69160469d5e 65890188 chromium-shell_154.0.8037.92-1~deb13u1_amd64.deb 6fc399c7a9f310c958d207d005a88212a390400b 31471 chromium_154.0.8037.92-1~deb13u1_amd64-buildd.buildinfo b70e4c1152dfd791df5400972faa99fd2ea0b5db 90613936 chromium_154.0.8037.92-1~deb13u1_amd64.deb Checksums-Sha256: a8d67dd17b03f2bfff4ccd1dd632d2db6f7b516e310bf5639494522b0aee8174 2198048 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb ed25b5290168e9775641864aa6f831b15fc53f57e63b30dcc0256d6588fa0831 30604900 chromium-common_154.0.8037.92-1~deb13u1_amd64.deb faa41f9a2151e6ab032620607ea822fc34cb5a99183f0a779f77a5ef55695351 32243956 chromium-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb b82bd5c1eefb6debf6e0331868a8bd12d9e3f0c8cbc23931d6e543dddc8eaf53 8471280 chromium-driver_154.0.8037.92-1~deb13u1_amd64.deb 0db1430673bbff9848f0a712cdc6e4a2960baa30e9ebe4a1dd689db30004ca8e 26576544 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb a16abad647e2ae9ba77349df1865f4d7b5cf8d9518739e685eab0e90c88d5101 66281032 chromium-headless-shell_154.0.8037.92-1~deb13u1_amd64.deb 5c121c6ae8b57640dd5ef4f3138a5f0f1c8a502239eb7d345da1e5b6365a3425 20260 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 4519f5a1483fb610c1dc412722ebbd4a4ab9921db2263a90f8bda34ce62c7967 151496 chromium-sandbox_154.0.8037.92-1~deb13u1_amd64.deb a0af0028cc9e0a0411b6f76bace40c2a47db612ddd73c6da03df46b14e349627 28269268 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb e5ab6801f8fb57b15c8d45a444b092c35aca91263a47cc22315bdb7e256bccc3 65890188 chromium-shell_154.0.8037.92-1~deb13u1_amd64.deb 216c2c94d1f88f613f4f8d6566a1ba783f34771af06a017d121110a5189ecf95 31471 chromium_154.0.8037.92-1~deb13u1_amd64-buildd.buildinfo ba20f2bf959cc302694147fb4d881586c7b41688c5dd5b1555f560732733e3d5 90613936 chromium_154.0.8037.92-1~deb13u1_amd64.deb Files: 947be36517dc62657ac8a6242bb49928 2198048 debug optional chromium-common-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 46040521da6fefa2f254710736a8077f 30604900 web optional chromium-common_154.0.8037.92-1~deb13u1_amd64.deb f522e4cfcd8302b14f366a4faf8f746f 32243956 debug optional chromium-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 1940bf498cd2bdc1df9defd418902f60 8471280 web optional chromium-driver_154.0.8037.92-1~deb13u1_amd64.deb 9a7eb3b9470097a23f4a4a330045542c 26576544 debug optional chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 050ab3123b07f2c47393bcc0a39f66b5 66281032 web optional chromium-headless-shell_154.0.8037.92-1~deb13u1_amd64.deb f34be10fc06741c447899b5dc6eae544 20260 debug optional chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb c07548783b313ea832fce53ec7bacbc8 151496 web optional chromium-sandbox_154.0.8037.92-1~deb13u1_amd64.deb 0ed2ae81087ebf89860bb1163cc87710 28269268 debug optional chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_amd64.deb 88c7168f6b8991568055ce6850b3f0fb 65890188 web optional chromium-shell_154.0.8037.92-1~deb13u1_amd64.deb 9465208dac43c86c792fc60f200a5d67 31471 web optional chromium_154.0.8037.92-1~deb13u1_amd64-buildd.buildinfo a2edd80e442f1e296f1a588dcea78527 90613936 web optional chromium_154.0.8037.92-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmq+UHUACgkQTwt/65ON 6zcKfQ/+P/FEwbtmj0hTcp8FyP0QFQbWUMR7VrkCef7BRHXp3GSdPo2OobOynD2l /BHo+U7vlE+DrZ+dktsu+FoW1mq4hL6oftGY2idOG20LqmKbff8s/bUeUCcuP2ih 4+3IvUqniboz/fEQs2jHk1Q9MSs1XnYbnZDrEXj52DCzysteUNxqIdrmeMFQUIaH ghJO0JIb3jM3eMQRxlx3xo0n4qXnxhaLuUXoU7W91VOcmChGp0YRhfMq0NgSg5e9 9LXKj1qPeOC0KC+hoy01uL6UmSf27ZuBM13yvoa4bCb06gOwBMATc/eyyHJCAKKu vRE76mqzfzftdn1U6MRg3lT4PLTbJIPNmf/0D91C7Z5NVZzk0kq8rBbF1xyM3KL2 1RNfaa7nuiY0JQO10vyKqK+LoxS8S+xBEidICn8kuvU0DqiX8fmVw5lRm//bcje4 AqEi/T9b/XOoiI2rsY2zvCHIw/1wG7yytj1yHSPrDpVsHvisWkZ0VaPS2IBBhVZ1 Cwvynzyn3iLkeGQplQ4VT9oq1MftHhmkloWuXADLLG35iqSeuYqrYfUmeHalCQCv 65DcCfF2UTtyRJfEkLgy4gqLkmy2Na44Oel85x9v9zrrXoHjQsXpLxQNM/wyvDJ7 XZhF15P7neHKvIFsdeMsoPAFcPiRWOVE8SewIztXM5vUzbiRBhk= =Zwon -----END PGP SIGNATURE-----