-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 14 Jul 2026 23:16:33 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.124-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (150.0.7871.124-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-15764: Use after free in Ozone. Reported by Google.
- CVE-2026-15765: Use after free in Ozone. Reported by Google.
- CVE-2026-15766: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google.
- CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas.
Reported by Google.
- CVE-2026-15769: Insufficient validation of untrusted input in
Linux Toolkit Theming. Reported by Google.
- CVE-2026-15770: Uninitialized Use in V8. Reported by Google.
- CVE-2026-15771: Insufficient validation of untrusted input in Media.
Reported by Google.
- CVE-2026-15772: Use after free in GPU. Reported by Google.
- CVE-2026-15773: Use after free in Core.
Reported by xinchaotian of Microsoft.
- CVE-2026-15774: Use after free in Skia. Reported by Google.
- CVE-2026-15775: Insufficient policy enforcement in V8.
Reported by wang1r923096443@gmail.com.
- CVE-2026-15776: Type Confusion in V8.
Reported by Salvatore Gulizia (nickname: Serotav).
- CVE-2026-15777: Use after free in UI. Reported by Google.
- CVE-2026-15778: Insufficient validation of untrusted input in
Navigation. Reported by Google.
* d/patches/upstream/libyuv-loongarch-fix-row_lsx.cc-and-row_lasx.cc.patch:
drop, merged upstream.
Checksums-Sha1:
954b913303445acd66bb547437d98c63f7f12cd6 4079 chromium_150.0.7871.124-1.dsc
b4fbd12de7df3afe3e8369f4497a4af6b478837d 941311420 chromium_150.0.7871.124.orig.tar.xz
693c20090f888a9619b859b884bb360e31f8375a 536532 chromium_150.0.7871.124-1.debian.tar.xz
5ec460086dc71edbde99e1482aceec45c8c18e4f 28283 chromium_150.0.7871.124-1_source.buildinfo
Checksums-Sha256:
0571939947444e9280d6ce5dfb96bac983ca6234a3eaef1eab5350dee87bfbb3 4079 chromium_150.0.7871.124-1.dsc
50f06f405618eda4a1d8b7399ad45985cab4eabf2ee9b5adeb80c0397ceb92c1 941311420 chromium_150.0.7871.124.orig.tar.xz
7f6422361a7e377a0aaaba26cd81b11b1d08ec73db67b2cd2f4adda0613a7315 536532 chromium_150.0.7871.124-1.debian.tar.xz
b7073a9222ec6e69305e9223b3758fee867b421d60406fed18ef364cff37285b 28283 chromium_150.0.7871.124-1_source.buildinfo
Files:
0ccb89d79dfc8d5df7696db3e35516d8 4079 web optional chromium_150.0.7871.124-1.dsc
aca404ee4f0888c74efeb1e62c60bfc4 941311420 web optional chromium_150.0.7871.124.orig.tar.xz
be10c24a835559d6ef4d2ef10d059822 536532 web optional chromium_150.0.7871.124-1.debian.tar.xz
16c199c0b232153f65d45939d8437c71 28283 web optional chromium_150.0.7871.124-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=swDe
-----END PGP SIGNATURE-----
