-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 03:47:05 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 154.0.8037.92-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (154.0.8037.92-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx. - CVE-2026-102317: Improper privilege management in Mojo. Reported by Google. - CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga. - CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google. - CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni. - CVE-2026-102306: Use after free in Bluetooth. Reported by Google. - CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google. - CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102303: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102311: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security). - CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge. - CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge. - CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb). - CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey. - CVE-2026-102325: Uninitialized resource in Skia. Reported by Google. - CVE-2026-102308: Use after free in Views. Reported by Google. - CVE-2026-102301: Out of bounds write in GPU. Reported by Google. - CVE-2026-102319: Uninitialized resource in GPU. Reported by Google. - CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt. - CVE-2026-102318: Out of bounds read in WebGL. Reported by Google. - CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec. - CVE-2026-102315: Uninitialized resource in Media. Reported by Google. - CVE-2026-102302: Buffer overflow in V8. Reported by Google. - CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint. - CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous. - CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact. - CVE-2026-102327: Incorrect authorization in WebView. Reported by Google. - CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google. - CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google. - CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google. * d/patches: - disable/omnibox-ai-mode.patch: add patch that *actually* removes the AI Mode button from the new tab page's omnibox. Checksums-Sha1: c4c8f27864107ad8e5c1c3ff6961a3350cdb8f75 2817416 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb b65c3b8ff802b3d36e72546548c02993de730a75 36457972 chromium-common_154.0.8037.92-1~deb13u1_ppc64el.deb 46a1c1f8f69e6574b5b2ba1af0dc567072804a5e 29211952 chromium-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 4cf62a470efc4c3c37617c00474f14c91c66650c 8191896 chromium-driver_154.0.8037.92-1~deb13u1_ppc64el.deb fb7a8bd951bf6f50ae7c862c6a3dfdea0fb67112 23206216 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb bc173657e28bb6c60ee270e47ba92a92ae444fd5 63699076 chromium-headless-shell_154.0.8037.92-1~deb13u1_ppc64el.deb d79066b5b52b88213833b3d34a9a43804f994dbc 19716 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb aaf54de264a70e886d30937a54b73f051151c622 151712 chromium-sandbox_154.0.8037.92-1~deb13u1_ppc64el.deb ce2fca127adc39541bdd17042e181792ad8e3e91 24227472 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb d41510da8bb562256740e4dd1fe19233f7cd3493 63211188 chromium-shell_154.0.8037.92-1~deb13u1_ppc64el.deb 849e016460179b96a67449e96ceaac1f30b90ca3 31404 chromium_154.0.8037.92-1~deb13u1_ppc64el-buildd.buildinfo 7e079b05689b29dfb1730c99bcc395f0288c6369 87529752 chromium_154.0.8037.92-1~deb13u1_ppc64el.deb Checksums-Sha256: 0a041aacdc7434b0b271cbd60faac422073981aa88b993ba06be680ee32b5ee5 2817416 chromium-common-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 91ac75183552f385ca4d518684acc719ee483f64d7f7ddcc052d5b3c5c569b49 36457972 chromium-common_154.0.8037.92-1~deb13u1_ppc64el.deb 31f4a74a9fe0879863f4fde5b49c32038d70ec38da2b8d250efaf8602fd7d0d0 29211952 chromium-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 7bde17ae6a9336e03e55fb21f697d5edfd1bf1c79b7d448e0eebc83e0863d672 8191896 chromium-driver_154.0.8037.92-1~deb13u1_ppc64el.deb 98a3c7d36c48ba8f39658bc5676c36f0bb8b41ffd3b6cb114367c626405cf042 23206216 chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 7f959bd669fe59c93f7376236605d5f5252db9c748f3603c023f12237d5aa903 63699076 chromium-headless-shell_154.0.8037.92-1~deb13u1_ppc64el.deb 4b6268779e9bbf2a9c72bd88f44da63efc88455e6498f156d539e7b93735005d 19716 chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb cc559e72b5a5626592f34b1f2f1f89309d8ccf4f3fda73e394e9be6e25da273d 151712 chromium-sandbox_154.0.8037.92-1~deb13u1_ppc64el.deb c527da39ccb9f0ce7af88b7ae6f5e0ec867417cb0fa3f2e0de001ab97fb47a7c 24227472 chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 956d4f641c2c3d0d8b32b963bf8f304a37af2df824c18592428209eeecb3c462 63211188 chromium-shell_154.0.8037.92-1~deb13u1_ppc64el.deb 7e6c717df2c533816718f219edbf00337449da0f3a226e98fb839fcae43b6ed8 31404 chromium_154.0.8037.92-1~deb13u1_ppc64el-buildd.buildinfo f724fc632c124902cdc647457a6921cc5346d5af331c98f9b739bea1fa619603 87529752 chromium_154.0.8037.92-1~deb13u1_ppc64el.deb Files: 326ed344b05ff6b88e408d76c9f075ee 2817416 debug optional chromium-common-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 091af3261db965d7c20224bd7d25ae27 36457972 web optional chromium-common_154.0.8037.92-1~deb13u1_ppc64el.deb 2b723f5ea3296282701f3e389e8b4596 29211952 debug optional chromium-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 9bd715d005e27a7bedb02ed69d0ed757 8191896 web optional chromium-driver_154.0.8037.92-1~deb13u1_ppc64el.deb 596ea042a36b6bde3b1aaed4f5f4b9ae 23206216 debug optional chromium-headless-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 50e2618eda492112ead65625b7231bb5 63699076 web optional chromium-headless-shell_154.0.8037.92-1~deb13u1_ppc64el.deb 5c8d266df848e359cf09f4bfe2f08077 19716 debug optional chromium-sandbox-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 6b33a89a53f9d8de95224f3c59f9a544 151712 web optional chromium-sandbox_154.0.8037.92-1~deb13u1_ppc64el.deb 955846d0076fc5bd5d684d93f359d2d2 24227472 debug optional chromium-shell-dbgsym_154.0.8037.92-1~deb13u1_ppc64el.deb 66b2843a7f878b02e909bee4652fd4f6 63211188 web optional chromium-shell_154.0.8037.92-1~deb13u1_ppc64el.deb 55c1f9976f19a3c5ef0ecfe912234d3a 31404 web optional chromium_154.0.8037.92-1~deb13u1_ppc64el-buildd.buildinfo a19c1577c40895c19bb0cb4533fbc15f 87529752 web optional chromium_154.0.8037.92-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmq/F7QACgkQDNLUPhbm g7PVRA//abSj2oK6KmhHtBbNNDNZqudOO+wiIW2/ZKaFuhs28De6uoPJ0qJBCuez am40VbkKxCLi8T6KXcKqNyiz226BxZqb9J7FjCVsx06gSOaA0lAXMLe2PHKrBLtV CveB7GPeDmenT8v7v2/ysrNdGQBHQLp5oogILc0ptQkQkxczTGuPuJrn7sGdF5HJ FNoUymEKcb7nbOttfc4/pEZ6H/TVeuWMRBXnXb9RGY5Jr6aBvsJJA4yXfqa89xA0 pbEbNNFx+9nEFEXqzSLOVCZB0zxB7friPsX+FvA/F0p9seezl5UdJN5/r/1ArhD9 utbBJX0IwDsqe8LXnBF80G74DdjddtksaTQ1DlZ7bMHl3F2Fvy7MdL40MX/jsooN zMzDq3HncNIrBfejfvz3uRZAJBhtNcm/qvUFS7QhPY2xBpQL7gSo5WYU/PjQ9toH 6vMtxTrZlWVcUjcw4C9Deme8zNoDW3rfSOfNMsLb/jwRnCKFoM/jU3OnmrRr1+Nf dR+xRmGhCv64ytL62m7RFLVuol8ZkcRZjvDOABQgvqwNOoggD1Nx0IDFyHwZec68 Xlg2tnYOG/orSW7Ao2lIa9CtKZpfERBioH30nyYn/3nFzyzOPcTCWlFWiOlMUypq pyCDHdFMtGhcZoQjSiUG+LY5IwvxYp+eZ2oTSVk4y7bcY2p9C1M= =llj+ -----END PGP SIGNATURE-----