-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Sep 2026 14:22:49 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 152.0.7977.75-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (152.0.7977.75-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-84353: Use after free in Shared Tab Groups. Reported by Google. - CVE-2026-84352: Use after free in WebGL. Reported by Google. - CVE-2026-84354: Incorrect authorization in FileSystem. Reported by Google. - CVE-2026-84359: Information leak in Skia. Reported by Google. - CVE-2026-84357: Improper input validation in Omnibox. Reported by Google. - CVE-2026-84324: Use after free in Proxy. Reported by Google. - CVE-2026-84349: Use after free in Browser. Reported by Google. - CVE-2026-84326: Uninitialized resource in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern). - CVE-2026-84333: Use after free in Dawn. Reported by Google. - CVE-2026-84351: Buffer overflow in GPU. Reported by Cassio Lima. - CVE-2026-84325: Improper input validation in DataTransfer. Reported by Google. - CVE-2026-84328: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84347: Use after free in WebRTC. Reported by Google. - CVE-2026-84323: Missing authorization in FileSystem. Reported by Google. - CVE-2026-84355: Incorrect authorization in Navigation. Reported by Google. - CVE-2026-84358: Improper privilege management in Downloads. Reported by Google. - CVE-2026-84332: Incorrect authorization in SiteSettings. Reported by Google. - CVE-2026-84330: UI misrepresentation in FullScreen. Reported by Google. - CVE-2026-84334: Incorrect authorization in Chromoting. Reported by Google. - CVE-2026-84348: Information leak in MediaCapture. Reported by Google. - CVE-2026-84335: Incorrect authorization in TabStrip. Reported by Google. - CVE-2026-84327: Incorrect authorization in Autofill. Reported by Google. - CVE-2026-84329: Confused deputy in CredentialProvider. Reported by Google. - CVE-2026-84356: UI misrepresentation in FullScreen. Reported by Francesco Topol (k4tedu). - CVE-2026-84350: Use after free in TabStrip. Reported by Google. - CVE-2026-84331: Incorrect authorization in Actor. Reported by Google. * d/control: bump rustc-web build-dep versioning up to 1.96, now that we have that in bookworm-proposed-updates. * d/patches: - trixie/rust-no-alloc-shim.patch: drop, no longer needed with newer rust. - trixie/rust-sanitize.patch: drop, no longer needed with newer rust. - debianization/rust-disable-debugsym.patch: add --no-mmap-output-file to link flags (another attempt to reduce armhf memory usage). - rust-1.85/jxl-simd-avx512.patch: drop, no longer needed with newer rust - rust-1.85/jxl-features.patch: drop, no longer needed with newer rust. - rust-1.85/parsing.patch: drop, no longer needed with newer rust. - rust-1.85/image.patch: drop, no longer needed with newer rust. - rust-1.85/rust-is-multiple-of.patch: drop, no longer needed with newer rust. - rust-1.85/file_as_c_str.patch: drop, no longer needed with newer rust. - rust-1.85/mojo-features.patch: drop, no longer needed with newer rust. - rust-1.85/zip8.patch: drop, no longer needed with newer rust. - rust-1.85/std-from-utf8.patch: drop, no longer needed with newer rust. - rust-1.85/let-chains.patch: drop, no longer needed with newer rust. - trixie/adler1.patch: drop, now that we have a newer rustc-web in bookworm. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Exclude a couple of targets from the pre-gen process as making them causes files to be written to the source tree. . [ Timothy Pearson ] * d/patches/ppc64le: - third_party/0003-third_party-ffmpeg-Add-ppc64-generated-config.patch: Fix FTBFS on ppc64le systems due to FFmpeg patch update. Checksums-Sha1: c2c92c84fd32e23e3582cf86fa28c2af9f290f8f 4128424 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 6e256234f5d407bd703c667d8f6cb4748405f3da 30264720 chromium-common_152.0.7977.75-1~deb13u1_i386.deb 66b5a05534edcb9f3756c115d2c42ca515a8eaca 37082316 chromium-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 23249536eb8c5dde9dcbb40184baca038d9433e3 8368992 chromium-driver_152.0.7977.75-1~deb13u1_i386.deb 9e5bb9addf51a8deab6260ae16fa06dea33a2686 30284256 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 29950a93e7dfb9ffccdc01b241cd8835f97a1756 60978492 chromium-headless-shell_152.0.7977.75-1~deb13u1_i386.deb 1e1a2aa3e9316a0a0ebd1bf59540027b0cc73d9a 19208 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_i386.deb e77e9a5b3e83e33bd9e60e6e13bb8c08ad3c33df 144064 chromium-sandbox_152.0.7977.75-1~deb13u1_i386.deb 617f9f752b8d3f29357d9fcc2e7a3cccb55c3249 33271864 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb e9094093e90ade3eb253a3fe3679a1355bec763a 67098916 chromium-shell_152.0.7977.75-1~deb13u1_i386.deb 09c975dcd539e811520b1c311225f1bf6fd7c1fb 31347 chromium_152.0.7977.75-1~deb13u1_i386-buildd.buildinfo c06588ab4b0ed9b8e69c450fc90e3d815a15f4ee 81110724 chromium_152.0.7977.75-1~deb13u1_i386.deb Checksums-Sha256: b51cc5765de6d3de5033670150bb50250125ec2b0357d369a80c7507270e1ede 4128424 chromium-common-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 4fedde47e4dd5a768f9493849ae32d05d1d73e43b6245c0157d03336fbe52c4f 30264720 chromium-common_152.0.7977.75-1~deb13u1_i386.deb 381be37260c6cdf28920eeebe3c39c829803ed01089404342a12928c3510ad85 37082316 chromium-dbgsym_152.0.7977.75-1~deb13u1_i386.deb e6d2a407da308d81cebf8485425c982f08ea4ffb170ea5b60a9effb00634f4e7 8368992 chromium-driver_152.0.7977.75-1~deb13u1_i386.deb 76481207d07e3f57825ca59103d0430c6665911e45b08ea58fdf98f3e467b7f1 30284256 chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 3fc12401a48fcd1ab8d255705537747b5a16275b304b29661aad4e634667aa02 60978492 chromium-headless-shell_152.0.7977.75-1~deb13u1_i386.deb cb517c958e659c9439ff73b0f09667a6d1d3a26c2feb7b16956c476a802e75a9 19208 chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 66c8fb0533b7e636ed9067914d696e3653373b58c56389bf76484d003eb0c699 144064 chromium-sandbox_152.0.7977.75-1~deb13u1_i386.deb 89763fd8a9784242672cc9da0f56f9ef1dba9979d7ded72f83ba1befe4634260 33271864 chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 0df5226edc7e63e95e94cb66e06f6775998b7254b4b0b15ab5e7829b00edf4cb 67098916 chromium-shell_152.0.7977.75-1~deb13u1_i386.deb 321f8ad309ef6bb5c479633e2c82dcba9f534064a043156458a07de71f09f9fa 31347 chromium_152.0.7977.75-1~deb13u1_i386-buildd.buildinfo d0f8cfe32c58d1f3bbb8b15a4b1777d930b74b2b0d9784118d42d2f386848677 81110724 chromium_152.0.7977.75-1~deb13u1_i386.deb Files: ff5908f058e39a58da9e9da76ff6c8df 4128424 debug optional chromium-common-dbgsym_152.0.7977.75-1~deb13u1_i386.deb fed7f7f8135e75b93aeab88c10122e51 30264720 web optional chromium-common_152.0.7977.75-1~deb13u1_i386.deb 0ae038fff848c080a208bff7085004e5 37082316 debug optional chromium-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 5abfa7c5b4feb24b73682769e3b58c2c 8368992 web optional chromium-driver_152.0.7977.75-1~deb13u1_i386.deb c318eef1ea4b83fe374eca46c28bf0e2 30284256 debug optional chromium-headless-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb d04f77f79977d894509cda172e3b21db 60978492 web optional chromium-headless-shell_152.0.7977.75-1~deb13u1_i386.deb 6d6a9f44d28b190bfcf3726e4289ece7 19208 debug optional chromium-sandbox-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 2a8fcd1b181bfc31af3778fb85f10e19 144064 web optional chromium-sandbox_152.0.7977.75-1~deb13u1_i386.deb 78758e852234cd71ecd56d2abadafd76 33271864 debug optional chromium-shell-dbgsym_152.0.7977.75-1~deb13u1_i386.deb 1e39acccd7f995bb04a93c5cd347165c 67098916 web optional chromium-shell_152.0.7977.75-1~deb13u1_i386.deb f7e2d084bd40c822e02689d5d9fd589c 31347 web optional chromium_152.0.7977.75-1~deb13u1_i386-buildd.buildinfo 1243d555e9e528f381e661d840194a72 81110724 web optional chromium_152.0.7977.75-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqZv6oACgkQN8Ugyu9d QiQCNA/+NCikF5C9/0JRC3j6bQflSLPANrKMmZJCtooYbi5v7nLtdh65fMHTNmza OdNHEHVSZkEtyAB9nCAusVKEQdTwDv216cbC0sWj4ZArz4NxaYqVyqKgyBRCsdde ScguSJy7aqOLD5AeMG9P8w0VyvmqzixTZ8sGCf2jxZD/QczaJJrmumi6b1daR4Pp jr2aakiiIaqcrGvPY8pwxHou/lnB+cAJGZp2AkdNypClLpQwKdFRsBRn70VxoxIi iK5nf6Glgko4XFl4zTAmZUvkefvMoIBb0AHnTbHFJSU483mvNn3XyeCWKXpOYogE ejxOMhV2FQY953KyIueliYWWXsXH5Dz8hwRhiYB1uIyyyiBmg6Qhd/2SVrJH4sXW 2XD2XlpIWb1Ai83nA4BNlQ4noJjF0aXS/NK8oG6HP3uRIPKPJvXpEMeXhYSUTQJe ICOVy7aVxiwEoitud53onHkPA0uyjMarh4WeviCWr+vqXCyFURYVfpsAsUmTyNIy aWEk3Fk9qPEamI+5sodu3Zn336LZtkDHiKCNM0yBvP78qM9Rpk4+kddk/tuN+N2j PQRMX87wPN/Gf7WyBVmyv8J16FUTfNPLjLmrY+yLNblsssSE7USG5FqfR2Hfl9JQ P+5qA/2z4+J3VVEbnk6ET0H/Im1B6Br0fys3gil06QMqMa3Vl6w= =soun -----END PGP SIGNATURE-----