-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2026 14:22:49 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 152.0.7977.75-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-06) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (152.0.7977.75-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-84353: Use after free in Shared Tab Groups. Reported by Google. - CVE-2026-84352: Use after free in WebGL. Reported by Google. - CVE-2026-84354: Incorrect authorization in FileSystem. Reported by Google. - CVE-2026-84359: Information leak in Skia. Reported by Google. - CVE-2026-84357: Improper input validation in Omnibox. Reported by Google. - CVE-2026-84324: Use after free in Proxy. Reported by Google. - CVE-2026-84349: Use after free in Browser. Reported by Google. - CVE-2026-84326: Uninitialized resource in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-84333: Use after free in Dawn. Reported by Google. - CVE-2026-84351: Buffer overflow in GPU. Reported by Cassio Lima. - CVE-2026-84325: Improper input validation in DataTransfer. Reported by Google. - CVE-2026-84328: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84347: Use after free in WebRTC. Reported by Google. - CVE-2026-84323: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-84358: Improper privilege management in Downloads. Reported by Google. - CVE-2026-84332: Incorrect authorization in SiteSettings. Reported by Google. - CVE-2026-84330: UI misrepresentation in FullScreen. Reported by Google. - CVE-2026-84334: Incorrect authorization in Chromoting. Reported by Google. - CVE-2026-84348: Information leak in MediaCapture. Reported by Google. - CVE-2026-84335: Incorrect authorization in TabStrip. Reported by Google. - CVE-2026-84327: Incorrect authorization in Autofill. Reported by Google. - CVE-2026-84329: Confused deputy in CredentialProvider. Reported by Google. - CVE-2026-84356: UI misrepresentation in FullScreen. Reported by Francesco Topol (k4tedu). - CVE-2026-84350: Use after free in TabStrip. Reported by Google. - CVE-2026-84331: Incorrect authorization in Actor. Reported by Google. * d/control: bump rustc-web build-dep versioning up to 1.96, now that we have that in bookworm-proposed-updates. * d/patches: - trixie/rust-no-alloc-shim.patch: drop, no longer needed with newer rust. - trixie/rust-sanitize.patch: drop, no longer needed with newer rust. - debianization/rust-disable-debugsym.patch: add --no-mmap-output-file to link flags (another attempt to reduce armhf memory usage). - rust-1.85/jxl-simd-avx512.patch: drop, no longer needed with newer rust - rust-1.85/jxl-features.patch: drop, no longer needed with newer rust. - rust-1.85/parsing.patch: drop, no longer needed with newer rust. - rust-1.85/image.patch: drop, no longer needed with newer rust. - rust-1.85/rust-is-multiple-of.patch: drop, no longer needed with newer rust. - rust-1.85/file_as_c_str.patch: drop, no longer needed with newer rust. - rust-1.85/mojo-features.patch: drop, no longer needed with newer rust. - rust-1.85/zip8.patch: drop, no longer needed with newer rust. - rust-1.85/std-from-utf8.patch: drop, no longer needed with newer rust. - rust-1.85/let-chains.patch: drop, no longer needed with newer rust. - trixie/adler1.patch: drop, now that we have a newer rustc-web in bookworm. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Exclude a couple of targets from the pre-gen process as making them causes files to be written to the source tree. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Fix FTBFS on ppc64le systems due to FFmpeg patch update. Checksums-Sha1: 8f5946e143c0f53bcb3cf163a32b4bb4ff1f9ce3 4983588 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 2c1a70dee225cad29762e7750d828efc954e9cfc 35182756 chromium-common_152.0.7977.75-1~deb13u1_arm64.deb fcb9209b3db540369e87e2e985f38877201bdcda 35642512 chromium-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 08afdc273eda60c80c49a27f483db78f83c8f74d 7061576 chromium-driver_152.0.7977.75-1~deb13u1_arm64.deb 8602e085f9a6f83ea3c623d8733292c609feef4f 29388928 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb c7c373a2be9986deeacf402b089ce06d6f778beb 56730608 chromium-headless-shell_152.0.7977.75-1~deb13u1_arm64.deb e146ac8f5b19c6b6775ed33e85432142b9259df3 20920 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb a81dfcb036f768c072949b0a469587f22a9d8022 144832 chromium-sandbox_152.0.7977.75-1~deb13u1_arm64.deb 7f7f40cbaa46a50dcb0d7267fd844ccd70f87de0 30913540 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb cc3385f56313872bb4a9c368aaace0b98e266321 56640868 chromium-shell_152.0.7977.75-1~deb13u1_arm64.deb 754207d6cdbba3ec9d35ab1a325cde736c8608ec 31463 chromium_152.0.7977.75-1~deb13u1_arm64-buildd.buildinfo 935d4f1672116373a4ebbbf2c4013ba0ae3b8ac0 77145228 chromium_152.0.7977.75-1~deb13u1_arm64.deb Checksums-Sha256: cbd1adc72c5acb79ca7f476de9e8fb869c283f3009ce6059ef36ef7f7d169b52 4983588 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb cfc6b1fd4fd6a9acb1590e837a838f77fd86ec5e18c45d1de678d3daa2076a29 35182756 chromium-common_152.0.7977.75-1~deb13u1_arm64.deb 966678622fe07e6733c7113da580e5bee7a6bbf66ad99c89011572787d5213d9 35642512 chromium-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb f077c1256e06ffdda44206e283681f17794183bf0a059b4ed62761e38e2c9952 7061576 chromium-driver_152.0.7977.75-1~deb13u1_arm64.deb 86527331333b47887ece432d4e12392b1976c792002e8756fa94eba3e89aaf83 29388928 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 795e84ad56b642bb2f083ff8c60ca1e066bef75a9eaa2146f0fcaef774c048fd 56730608 chromium-headless-shell_152.0.7977.75-1~deb13u1_arm64.deb 0d654fcae5c25c18c56ecadf053dfae203a8739f7f1ba6bb71c85be162cc379f 20920 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 8f8f570ebe1d258b648d527a0a42c65512bd5600ad8619e736c1f1a759186aff 144832 chromium-sandbox_152.0.7977.75-1~deb13u1_arm64.deb ef5d35593fbdccaa18f2883492bbddf73f8254f6811469d85ba1fbe53140f9be 30913540 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 0cbc998b78527c3264f66bbfd6afd844d5705f264cba3b53524dd15edf32f7fb 56640868 chromium-shell_152.0.7977.75-1~deb13u1_arm64.deb 4c88bab4121163c5797c91640ecc188619dd47ce79f727dd5c770e6998723e0d 31463 chromium_152.0.7977.75-1~deb13u1_arm64-buildd.buildinfo e9dc0e39bb0175bda0a5891aed01ca5c90dbcf3c69d375f7678af578f8bf81ed 77145228 chromium_152.0.7977.75-1~deb13u1_arm64.deb Files: bb349abe6fe0e10fa312b0986c05e746 4983588 debug optional chromium-common-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb aa270e9319e586d8e6cb6de6e426672e 35182756 web optional chromium-common_152.0.7977.75-1~deb13u1_arm64.deb 33cdd93835f81d4b3ee76e75de48513a 35642512 debug optional chromium-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 6573c9c30a02e963211d9247adb93e8a 7061576 web optional chromium-driver_152.0.7977.75-1~deb13u1_arm64.deb 9cd2df5ed5cebccca48e9c6ff8210c34 29388928 debug optional chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb eedb2ca3b39d5bc935e3e98a4873599b 56730608 web optional chromium-headless-shell_152.0.7977.75-1~deb13u1_arm64.deb 01499e0be8e9fbd25d18962a021663ca 20920 debug optional chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 7ff6e806966c72b7c223583f876b6e21 144832 web optional chromium-sandbox_152.0.7977.75-1~deb13u1_arm64.deb 83ac76dfe3dd312c2d2d37ca76de5dfe 30913540 debug optional chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_arm64.deb 5e4a6a8b12848bbadce199c93197845b 56640868 web optional chromium-shell_152.0.7977.75-1~deb13u1_arm64.deb 98d63cf8f18462461d5c7f54fb833c29 31463 web optional chromium_152.0.7977.75-1~deb13u1_arm64-buildd.buildinfo 5d4091872d9d9240963569f2558db12e 77145228 web optional chromium_152.0.7977.75-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmqZj3AACgkQutMAkCxK bL1eCw/+KQ2Etk+1Fd64Voe2ek72F8YNQdDj3vqTsb1LvTYpJMl/o9oUekUQxUsb xKnfbs+M8HnmbpfgPyrDLlmIU/RXxO2OQ88GI31zFGqZeQeELHbMLYR35A3YLY52 iPShXp6cd22gTOGUcPhwuMmKN1AgDrKeE+qLzA/WwIqqHcsJLSUYEAQ0zEUZje/z Q6tGPH5IeFlCa3vklOs47sqN83SDWwtq1nztkenjv3+PmWo5RZWgcX9mSWG33DS9 5ZjRAyFZmwuvI6yIOx6x1KQFkCvwUkwWfqXyol6cUkhYBn+Y8E0mFjqAPd85kxPx 9dQIv4a+93C2+g5TSAYxVdxZxGlx9wXBteKvDkY9pQj5yh4R9QYggBHyoO0Ejxnb ru5zLK3QVoesLRruVMA89JE9F8NjrhfjSikDuyd1Y0RJErX80LbhQx1SqXFL4fah 8u6NarSF75kOdqryBLRd3S6h+m7vQ4WoVrnNZW8x8/lLQjIZQIgX4YblsOZyB1pC TIzho567fOWwFm92zb8TQYwQD20RlzeyRLdEbyQZtZt2PeWOUsTlFyIel3vrMuhg ub6SabSYJE8bL/6sKfnTi09COqRx8WOhQKGdinFqpJhNxueU7ZIRQYa8ZIJ/rYGF Y8TcsNHWQHyn4OM9Kye84WgfKm5fgbt6v4xX9ZgmFusKbFS3jps= =KEr9 -----END PGP SIGNATURE-----