-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 17:31:48 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 154.0.8037.57-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1135653 1146746 Changes: chromium (154.0.8037.57-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-95350: Buffer overflow in ANGLE. Reported by Billy Jheng Bing Jhong, Muhammad Alifa Ramdhan, Pan Zhenpeng of STAR. - CVE-2026-95357: Out of bounds write in GPU. Reported by Anymous. - CVE-2026-95339: Use after free in ServiceWorker. Reported by Andrew Boni. - CVE-2026-95281: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan of STAR Labs SG Pte. Ltd. - CVE-2026-95313: Use after free in Fullscreen. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95349: Buffer overflow in WebGL. Reported by Google. - CVE-2026-95284: Buffer overflow in ANGLE. Reported by Muhammad Alifa Ramdhan (STARLABS SG). - CVE-2026-95322: Out of bounds write in GPU. Reported by David Sievers (@loknop). - CVE-2026-95329: Out of bounds write in WebGL. Reported by Google. - CVE-2026-95356: Use after free in WindowDialog. Reported by Xinyang Ge. - CVE-2026-95310: Use after free in AdFilter. Reported by Xinyang Ge. - CVE-2026-95301: Missing authorization in Extensions. Reported by OGINOME Tomohito. - CVE-2026-95291: UI misrepresentation in SecurityIndicators. Reported by NH DEV. - CVE-2026-95355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-95315: Use after free in Aura. Reported by Google. - CVE-2026-95298: Use after free in Browser. Reported by Google. - CVE-2026-95372: Use after free in Chromecast. Reported by Google. - CVE-2026-95324: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95283: Buffer overflow in Tint. Reported by Google. - CVE-2026-95293: Uninitialized resource in GPU. Reported by TienPA - NGS Holdings. - CVE-2026-95274: Improper output encoding in DevTools. Reported by Google. - CVE-2026-95282: Use after free in Platform. Reported by Google. - CVE-2026-95373: Use after free in DevTools. Reported by Google. - CVE-2026-95277: Use after free in Views. Reported by Google. - CVE-2026-95348: Use after free in Bluetooth. Reported by Google. - CVE-2026-95335: Use after free in HID. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-95338: Use after free in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722). - CVE-2026-95318: Buffer overflow in Video. Reported by alex.laboirie. - CVE-2026-95286: Type confusion in Bindings. Reported by @bean5oup. - CVE-2026-95365: Type confusion in IndexedDB. Reported by HoneyBee. - CVE-2026-95343: Use after free in WebAudio. Reported by HoneyBee. - CVE-2026-95280: Race condition in V8. Reported by Google. - CVE-2026-95304: Out of bounds write in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95306: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-95299: Use after free in GPU. Reported by Google. - CVE-2026-95351: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-95287: Missing authorization in Navigation. Reported by Google - CVE-2026-95366: Use of released resource in Core. Reported by Google. - CVE-2026-95382: Improper input validation in Auth. Reported by Google. - CVE-2026-95381: Improper input validation in Printing. Reported by Google. - CVE-2026-95331: Out of bounds write in ANGLE. Reported by Google. - CVE-2026-95297: Missing authorization in Contextual Tasks. Reported by Google. - CVE-2026-95375: Incorrect authorization in BrowserTag. Reported by Google. - CVE-2026-95302: Incorrect authorization in WebAPKs. Reported by Google. - CVE-2026-95362: Cross-site request forgery in DevTools. Reported by Google. - CVE-2026-95369: Inappropriate implementation in XML. Reported by Google - CVE-2026-95376: Externally controlled reference in DevTools. Reported by Google. - CVE-2026-95359: Uninitialized resource in GPU. Reported by Google. - CVE-2026-95294: UI misrepresentation in Browser. Reported by Google. - CVE-2026-95337: UI misrepresentation in Messages. Reported by Google. - CVE-2026-95346: UI misrepresentation in Chromoting. Reported by Google. - CVE-2026-95320: Missing authorization in Navigation. Reported by Google - CVE-2026-95317: Incorrect authorization in MediaCapture. Reported by Google. - CVE-2026-95345: Use after free in Actor. Reported by Google. - CVE-2026-95330: Improper state validation in Downloads. Reported by Google. - CVE-2026-95370: Inappropriate implementation in NFC. Reported by Google - CVE-2026-95303: Incomplete cleanup in SmartCard. Reported by Google. - CVE-2026-95360: Race condition in Editing. Reported by Google. - CVE-2026-95295: Information leak in Mobile. Reported by Google. - CVE-2026-95276: Improper input validation in Themes. Reported by Google - CVE-2026-95314: Incorrect authorization in HID. Reported by Google. - CVE-2026-95371: Missing authorization in Views. Reported by Google. - CVE-2026-95353: Use after free in Bindings. Reported by Google. - CVE-2026-95363: UI misrepresentation in FileSystem. Reported by Google. - CVE-2026-95341: Improper input validation in Desktop. Reported by Google. - CVE-2026-95354: Use after free in Verifier. Reported by Google. - CVE-2026-95384: Race condition in Transactions Platform. Reported by Google. - CVE-2026-95336: Information leak in Transactions Platform. Reported by Google. - CVE-2026-95290: Missing authorization in NFC. Reported by Google. - CVE-2026-95325: Use after free in ANGLE. Reported by Google. - CVE-2026-95275: Incorrect reference resolution in MediaStream. Reported by Zabith Mohammed (@nmzabith). - CVE-2026-95374: Incorrect authorization in Network. Reported by NH DEV. - CVE-2026-95300: Missing authorization in DevTools. Reported by Google. - CVE-2026-95321: UI misrepresentation in Payments. Reported by jodyritonga. - CVE-2026-95323: UI misrepresentation in Chromium. Reported by Wihdatu Nuuro Ahmadi. - CVE-2026-95332: Use of uninitialized variable in Tint. Reported by Google. - CVE-2026-95312: Information leak in Passwords. Reported by Google. - CVE-2026-95344: Race condition in DevTools. Reported by @bean5oup. - CVE-2026-95289: Incorrect authorization in Scroll. Reported by Vu Van Tien (@n0_Be3r). - CVE-2026-95347: Use after free in Updater. Reported by a45hif. - CVE-2026-95311: Free of non-heap memory in Fonts. Reported by Google. - CVE-2026-95358: Incorrect authorization in Mobile. Reported by Google. - CVE-2026-95333: Use after free in Metrics. Reported by sean geofrey. - CVE-2026-95307: UI misrepresentation in ExtensionsMenu. Reported by Hafiizh. - CVE-2026-95285: Missing authorization in WebView. Reported by Google. - CVE-2026-95278: Missing authorization in WakeLock. Reported by Google. - CVE-2026-95327: Information leak in Networking. Reported by Google. - CVE-2026-95334: Incorrect reference resolution in WebProtect. Reported by Google. - CVE-2026-95308: Integer overflow in Metrics. Reported by Google. - CVE-2026-95292: Incorrect authorization in Safebrowsing. Reported by Google. - CVE-2026-95352: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95279: UI misrepresentation in Omnibox. Reported by Google. - CVE-2026-95367: Information leak in DataTransfer. Reported by Google. - CVE-2026-95385: Inappropriate implementation in PlatformIntegration. Reported by Google. - CVE-2026-95368: Incorrect authorization in DevTools. Reported by Google - CVE-2026-95319: Use after free in Printing. Reported by Google. - CVE-2026-95326: Incomplete cleanup in Bluetooth. Reported by Google. - CVE-2026-95309: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95361: Confused deputy in DevTools. Reported by Google. - CVE-2026-95288: UI misrepresentation in Mobile. Reported by Google. - CVE-2026-95380: Type confusion in V8. Reported by Google. - CVE-2026-95342: Missing authorization in V8. Reported by Hongwei Li, Zhun Wang, Ziyue Pan, Junmin Zhu, Saastha Vasan, and Wenbo Guo. - CVE-2026-95296: Missing authorization in Core. Reported by Quyền Sơn (@zer0qs1337). - CVE-2026-95316: Unchecked return value in Performance. Reported by Google. - CVE-2026-95328: Confused deputy in Mobile. Reported by Google. - CVE-2026-95340: Incorrect authorization in PictureInPicture. Reported by Google. - CVE-2026-95364: Improper input validation in Passwords. Reported by Google. - CVE-2026-95305: UI misrepresentation in Chromoting. Reported by Google. * d/control: - remove generate-ninja build-dep. - stop recommending chromium-sandbox (closes: #1135653). * d/copyright: stop deleting tools/gn/. * d/rules: restore old code that builds the bundled version of generate-ninja as part of the chromium build. Upstream keeps using brand new gn features (sometimes not even available in sid yet) and we're carrying too many patches to work around that. * d/patches: - debianization/pre-gen.patch: rework clang argument filtering due to upstream changes. - disable/tests.patch: refresh. - disable/catapult.patch: refresh. - llvm-22/clang22.patch: refresh. - ungoogled/disable-ai.patch: sync from u-c - ungoogled/disable-mei-preload.patch: sync from u-c - ungoogled/disable-privacy-sandbox.patch: sync from u-c - fixes/crubit.patch: drop - system/rust-cbor.patch: drop - ungoogled/crubit.patch: add a patch pulled from u-c, which includes stuff from fixes/crubit.patch and system/rust-cbor.patch.. plus more. - ungoogled/verification-tokens.patch: add a patch pulled from u-c to fix a build failure related to private verification tokens. Two week release cycle is awesomesauce. - fixes/tsc-split-comp.patch: add a build fix for debian's typescript. - ungoogled/disable-ai-search-shortcuts.patch: add patch to disable the new AI button and the @gemini/@aimode shortcuts (closes: #1146746). - trixie/gn-string-hash.patch: drop, no longer needed with bundled gn. - trixie/gn-len.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-module-name.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-unused-vars.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - trixie/gn-funcs.patch: drop, no longer needed with bundled gn [trixie, bookworm]. - bookworm/gn-revert-path-exists.patch: drop, no longer needed with bundled gn. - bookworm/foreach.patch: drop, no longer needed with newer clang [sid, trixie]. . [ Timothy Pearson ] * d/patches/ppc64le: - fixes/fix-rust-linking.patch: refresh for upstream changes - third_party/0002-regenerate-xnn-buildgn.patch: refresh for upstream changes - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: refresh for upstream changes . [ Daniel Richard G. ] * d/deb_pre_gen.py: Handle new arg signature of generate_css_js_files.js, and the new run_with_restat.py script; also streamline regexes a bit. * d/patches: - debianization/pre-gen.patch: Handle run_with_restat.py script, and neuter run_with_stamp.py. - trixie/gn-unused-vars.patch: Refresh. * d/rules: Set njobs for the init-pre-gen target for a faster GN build. . [ Jianfeng Liu ] * d/patches: loongarch64/0020-user_agent-add-loongarch-architecture-support.patch: refresh for upstream changes Checksums-Sha1: 39a9875abde8e70c844f499473a5fa696c74a6f1 2198296 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 8e50cdd9dba45727d71cd50e0960cead34d403f3 30613260 chromium-common_154.0.8037.57-1~deb13u1_amd64.deb bd44c460e95754898e863fa65b6a4db483a66695 32231832 chromium-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb fb8ccdb5a7a2479f0ff8e99bc9823aee9cf82a48 8472212 chromium-driver_154.0.8037.57-1~deb13u1_amd64.deb e7e6d7959c8083c651bb6feae7c1116d20dd85d1 26583356 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 96db17188b861973dc90dc885b0d6438350f33f8 66285420 chromium-headless-shell_154.0.8037.57-1~deb13u1_amd64.deb d222f17fb4e6ccdd6960b2e5df1aa29d9008509d 20264 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 1ce432be743654ba98dabe854f8c5b1af2b3755e 151108 chromium-sandbox_154.0.8037.57-1~deb13u1_amd64.deb 42f2048239283bc2577fb2e186a0f92a2da5cfdb 28234408 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb e3d30609c2a45831a8572b25ca3cca88c44d617a 65875712 chromium-shell_154.0.8037.57-1~deb13u1_amd64.deb 920e835130652cd37b8d15079c777318fecf4ac4 31471 chromium_154.0.8037.57-1~deb13u1_amd64-buildd.buildinfo 387632eea0e21883b0366f99c33972825ad24de4 90587876 chromium_154.0.8037.57-1~deb13u1_amd64.deb Checksums-Sha256: ebdbaabf7c00d0e7dfbe57eb759eb25f94ad0e2d26cd388d750f015f644ad73d 2198296 chromium-common-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 8adc7a808ab393bd9f38855c8ad15757be8896eae36afc86728776a02c0794a7 30613260 chromium-common_154.0.8037.57-1~deb13u1_amd64.deb 3541d69e9360a34625790608e9f945bd9be016b32ed6254ea3b97978695a3cda 32231832 chromium-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 3597caf8520a163ebb5c3f7ea64522ce62d2cba4d2ba14e2da8e658e4d42ea48 8472212 chromium-driver_154.0.8037.57-1~deb13u1_amd64.deb 777dca380ee49fe9e1650da43e3815788b0c56564f506b96021c330491f5850a 26583356 chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 663e98fdb2859dac498032498ee21cb1c6b07a55f221ad17870eab93f280af9e 66285420 chromium-headless-shell_154.0.8037.57-1~deb13u1_amd64.deb 05e93b91459ec94711907ea80e0302f0dc617ee08c0b2268dbeb9e29164cd922 20264 chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb f90e614ef3626282057935d1172a95ff4f26a6fb4b7fb760f72b44b693dba419 151108 chromium-sandbox_154.0.8037.57-1~deb13u1_amd64.deb 0ca860f608aaeb378185948debe60067c5a1d072c580335891587cc8928d4673 28234408 chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 9f9ed8759049382233bbbf622ddbe5c91c138e74492cca9cd659f49a6826c9e0 65875712 chromium-shell_154.0.8037.57-1~deb13u1_amd64.deb 939675f9d7a4eaa524ff1643782febcba63e2eb2099eb5508b4f42ab8ac02a58 31471 chromium_154.0.8037.57-1~deb13u1_amd64-buildd.buildinfo d70bab9fbcb7bfbb7227b9510fb5cf1f7290bd6d6af3dd168b19ba4cc9b8035d 90587876 chromium_154.0.8037.57-1~deb13u1_amd64.deb Files: dff0a91dbf9a865eef035033f102fe27 2198296 debug optional chromium-common-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb ec608d00d607ed2727263f9c2593432d 30613260 web optional chromium-common_154.0.8037.57-1~deb13u1_amd64.deb db185abc9316072a389ffdad75ddcbab 32231832 debug optional chromium-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 9af6100ddaa1fe9b7f9b2113e8a15dd4 8472212 web optional chromium-driver_154.0.8037.57-1~deb13u1_amd64.deb 9f91ca9ff68e1a6220c6859683d9d70c 26583356 debug optional chromium-headless-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 385cc13778fb96a0dbe27f9ec604a1c4 66285420 web optional chromium-headless-shell_154.0.8037.57-1~deb13u1_amd64.deb 9fc7541eb1a6476e1ab28a3e8cb51358 20264 debug optional chromium-sandbox-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 56a40dabdf1a4e7edaa2f320cce27c6a 151108 web optional chromium-sandbox_154.0.8037.57-1~deb13u1_amd64.deb 9752779ee8855908da7fb1dd2ae0f6a2 28234408 debug optional chromium-shell-dbgsym_154.0.8037.57-1~deb13u1_amd64.deb 7dee068b69cb9916115cc8acd257107e 65875712 web optional chromium-shell_154.0.8037.57-1~deb13u1_amd64.deb b925574ca9ad3e380444decf9ff9915e 31471 web optional chromium_154.0.8037.57-1~deb13u1_amd64-buildd.buildinfo 531d95faacff7e2bdcdbddb22105d063 90587876 web optional chromium_154.0.8037.57-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmq2tI4ACgkQYg9P9sm2 dfHlCRAAvJvInusTcli83BiWT4eGUaZ8w3ugpISRWnhtoatv/rDPMFp7P62oeq2q oq/MAlyIOiT40EHz2DpEPpXwFmSeyDpHyY+WbySvm5ADaLyXBQiED1Dx9UY9M/dZ LQp675d29X/4TYt5iOSL18wMHX9vKVxgqjCvSmyw7FbStHHhKa00NRBpS11IliEr xlpmpFd02Nm174dQml6VyzGp9dzafIKI6NtSuJ02WsdTGS82iqtZOl9QO8Om4a6M UNnK+ngVVcC+JNnHXZpbOxoJJ6TFMr6TrXCyIHH+aKuBFw3gax20Kw01wr9AL/6a de4OuMaMnPVZ7Pf56/Mi7dlvk3/5FlyeNLW49DWayHFuyr6Byvb3BxricN6WnwMD MpyYnSC+4n61c6A3IoJW6UnVpydZiTWoPd15MCwHdgfpTIC/BE3rtCXkbevY6j4e h6bfWtxr581J0NWxweg0aAobd4SXJ5XtJX5h6UKo4aeGWIC2VHnKPbBKbN57ZTX5 UUdxJN+fMG8ADasa3oLFuhwxtnUBYwdv56rZiwapjIjoevl0c2ey7XXFMcArZzZc FDLn0ztHIUtvmTkUjKExiufNgz93IOPsDRPZgIlJprbUrFKPsJvBdU+2wmqipKf1 YWLaNPHdgAC+pshe0BoDY5oT2582w3gr3yqi4SRNFMMBVWsP6QA= =UYB0 -----END PGP SIGNATURE-----