-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 03:47:05 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 154.0.8037.92-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (154.0.8037.92-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx. - CVE-2026-102317: Improper privilege management in Mojo. Reported by Google. - CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga. - CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google. - CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni. - CVE-2026-102306: Use after free in Bluetooth. Reported by Google. - CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google. - CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102303: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102311: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security). - CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey. - CVE-2026-102325: Uninitialized resource in Skia. Reported by Google. - CVE-2026-102308: Use after free in Views. Reported by Google. - CVE-2026-102301: Out of bounds write in GPU. Reported by Google. - CVE-2026-102319: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt. - CVE-2026-102318: Out of bounds read in WebGL. Reported by Google. - CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec. - CVE-2026-102315: Uninitialized resource in Media. Reported by Google. - CVE-2026-102302: Buffer overflow in V8. Reported by Google. - CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint. - CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous. - CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact. - CVE-2026-102327: Incorrect authorization in WebView. Reported by Google. - CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google. - CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google. - CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google. * d/patches: - disable/omnibox-ai-mode.patch: add patch that *actually* removes the AI Mode button from the new tab page's omnibox. Checksums-Sha1: 75bb042044b76aa09ce6a2dc06b4cdf58595fd7b 2200592 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 54fa35e750a83398f18f76704e2c4c9bf1573f85 30721400 chromium-common_154.0.8037.92-1~deb13u1_i386.deb f282a506c9b6bfde2af523f131b29a051397a35a 35294124 chromium-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 7701cc65ff3d087eac6f66a255f7dbd4d04cdba3 8831216 chromium-driver_154.0.8037.92-1~deb13u1_i386.deb 1458171ded408f447bb8d7f6db413c514a988a98 28333008 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 91530a2bd226690ea3a523805ae6c9bc8e480058 62297936 chromium-headless-shell_154.0.8037.92-1~deb13u1_i386.deb b8e1a2a7442775e348006b17b97471257b036908 19192 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_i386.deb aa7b1455dbe661769aef6bc2968152c085ce6ac8 151360 chromium-sandbox_154.0.8037.92-1~deb13u1_i386.deb 307f756275209d21556c0a02431c71eba967dcdb 31310208 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb e20fc50ca3979ba5fe966e2c33acacb1152c01a0 68559932 chromium-shell_154.0.8037.92-1~deb13u1_i386.deb 20ff31d15793e5f264fe96be6ffd256bbe88fc12 31393 chromium_154.0.8037.92-1~deb13u1_i386-buildd.buildinfo a8c2fe2b5854f750b8c015c3007d83a2d0096515 82414440 chromium_154.0.8037.92-1~deb13u1_i386.deb Checksums-Sha256: e795036f9327ec2011b9be21e947728c90e5fb39c56b75174435af5e5d920a11 2200592 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_i386.deb b79c9b3f64af741ca7060761569305473a80b20d485a80a621fd46748128b983 30721400 chromium-common_154.0.8037.92-1~deb13u1_i386.deb b6b9108728cafa9162b32efcb0b5f13f795df4df793f709a845efba3983aa858 35294124 chromium-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 996e0c2ae0fd881d444f0e93141f3f4794609396bd0b1c1fb86882ec1edd8185 8831216 chromium-driver_154.0.8037.92-1~deb13u1_i386.deb fedb4761b3d422990b542443e1bb1b2d7d7ecb185d5a429bb2cf503c1c0d7815 28333008 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb e2cecb19465c650c51a5c2897262d0e860c0ad5efc3816cb8ff89a10bd776fe4 62297936 chromium-headless-shell_154.0.8037.92-1~deb13u1_i386.deb 6b047aa6e8cfc061e1b192365e38aba6604a4879dfd03a4ddc72c0a42e50ef93 19192 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 5623c135d6970635b27865afb060bd3a84df0d76e18f0bfc178b9a4ce814c8e8 151360 chromium-sandbox_154.0.8037.92-1~deb13u1_i386.deb 0ad1f7cb737fd80f68943f77747a294bdf850e85cc1f498a06381f3165781770 31310208 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 01b22097584d155125c84b1a81475e41880a20ced2aecc7f7077edbb47cb0c07 68559932 chromium-shell_154.0.8037.92-1~deb13u1_i386.deb bf4bfc1926f517c764c8e094bc6a7b27ac88b1b630c04427e60f48384dfc5806 31393 chromium_154.0.8037.92-1~deb13u1_i386-buildd.buildinfo ace4f666d703c595d2f2f423c70328c61e580a9f1ffc275d1bf69e9b51f57995 82414440 chromium_154.0.8037.92-1~deb13u1_i386.deb Files: b1ace76b106d3163d50f4cb5d1fe1bc8 2200592 debug optional chromium-common-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 17877f862b57e11e54e5d9787ca69f39 30721400 web optional chromium-common_154.0.8037.92-1~deb13u1_i386.deb a5e05ee065e02c515b8d24bf3433ffd8 35294124 debug optional chromium-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 4383258149bb795a9a0498bdc42d396d 8831216 web optional chromium-driver_154.0.8037.92-1~deb13u1_i386.deb 03f6e8e83c680454ce5f2256d9c3f5bf 28333008 debug optional chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb a34985f7d854f9105329b619d30b4546 62297936 web optional chromium-headless-shell_154.0.8037.92-1~deb13u1_i386.deb 1691b5992cb9ca333d7d220502900c54 19192 debug optional chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_i386.deb a7762699c41a20e9be07c3bf4ea0d997 151360 web optional chromium-sandbox_154.0.8037.92-1~deb13u1_i386.deb 4d8e0a8c88efee8af14fa4dd4b129793 31310208 debug optional chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_i386.deb 5e21380e5b86fcb4f8fe7c666a7202e6 68559932 web optional chromium-shell_154.0.8037.92-1~deb13u1_i386.deb 89bfe221b8197e92fdf1c5ad128e14db 31393 web optional chromium_154.0.8037.92-1~deb13u1_i386-buildd.buildinfo 55210b013ad8f572845a9eecd77d39c1 82414440 web optional chromium_154.0.8037.92-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmq+ftoACgkQGNGWmfrq ILFzKw//bLY/7M250azV+HPHPbwvVzkubhvmI7MY9t2f46bSF0Z6PR2GYTGMQRbK +ZTRT88jOEAWiy9g1+A9+xYfPV4q8xlcrFsT8l9omDE12+6GOWBGaNICB5oh7zX4 wk1ZbEgx7YldtWYn00y7ruCxh+JZ7v/XQZEmgjLcBIIgkcbeqSGlUtwS5CUQkHac Vc2XlgEgum2gkmIr2cu6xDuIdN77JoRSSjaSxc6uEkOnHjKWvuXmBdzKvkt9RWhZ 9xsV3NC0BOd+jrkiO9mh9gcS7VifS+mXTE0Qq7S8ySvJPOtV2A+gspusK+vos6oO AMTJYefAcom9dUQncyJhIQCAgJzlNHx4sUWJJ1Ubw/0fqXE3R2gHZ71+HIxcfuHN 31fdiCcRBFlExPpULNqMXptNZkkK6bIPLgHywSBVGamDUzj+pbPiOWlAm+b3CwI2 XausrLmxWIXxdw9HhdqTG4w6xm8qu13vTcmbV/v27rXeCw9oD//cNIq3f683fBb8 gpzpyotcp9gjXdiLJLTy3D3jUuG8MXy2VwIpye8KlcM/ZHqWaKe4okyZSyLOoQag 3MJyobX/GvqoJ5QLPfczNB7VbOBXz3+BiUt6jw2eWAosi5VUfRDCfRU4WCxyPAnt qcgmyLcIt9zb4YQYeMWvOHkq/mFhwvwhHHzPq4U0p8oidI3rPrU= =no3D -----END PGP SIGNATURE-----