-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 14 Jul 2026 23:16:33 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.124-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (150.0.7871.124-1~deb12u1) bookworm-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-15764: Use after free in Ozone. Reported by Google.
- CVE-2026-15765: Use after free in Ozone. Reported by Google.
- CVE-2026-15766: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google.
- CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas.
Reported by Google.
- CVE-2026-15769: Insufficient validation of untrusted input in
Linux Toolkit Theming. Reported by Google.
- CVE-2026-15770: Uninitialized Use in V8. Reported by Google.
- CVE-2026-15771: Insufficient validation of untrusted input in Media.
Reported by Google.
- CVE-2026-15772: Use after free in GPU. Reported by Google.
- CVE-2026-15773: Use after free in Core.
Reported by xinchaotian of Microsoft.
- CVE-2026-15774: Use after free in Skia. Reported by Google.
- CVE-2026-15775: Insufficient policy enforcement in V8.
Reported by wang1r923096443@gmail.com.
- CVE-2026-15776: Type Confusion in V8.
Reported by Salvatore Gulizia (nickname: Serotav).
- CVE-2026-15777: Use after free in UI. Reported by Google.
- CVE-2026-15778: Insufficient validation of untrusted input in
Navigation. Reported by Google.
* d/patches/upstream/libyuv-loongarch-fix-row_lsx.cc-and-row_lasx.cc.patch:
drop, merged upstream.
Checksums-Sha1:
b5938ade6e8d6a8ea8ee916ff3088635ae25788e 4068 chromium_150.0.7871.124-1~deb12u1.dsc
b4fbd12de7df3afe3e8369f4497a4af6b478837d 941311420 chromium_150.0.7871.124.orig.tar.xz
0d85c15950a7202df743d374349e4768393b7e1d 8622496 chromium_150.0.7871.124-1~deb12u1.debian.tar.xz
6b9ae7fd118d5f4db813f013e704ab042081e47b 26997 chromium_150.0.7871.124-1~deb12u1_source.buildinfo
Checksums-Sha256:
409ba2c744b1f61adc80b8f3ec9b58e42fbf51d0dc90f306369309101870e981 4068 chromium_150.0.7871.124-1~deb12u1.dsc
50f06f405618eda4a1d8b7399ad45985cab4eabf2ee9b5adeb80c0397ceb92c1 941311420 chromium_150.0.7871.124.orig.tar.xz
00fe596b8eec531ea805d516f144c0159cd1c6717e5c216f585dc732f9162a8f 8622496 chromium_150.0.7871.124-1~deb12u1.debian.tar.xz
6d3e5ab14d48f196ecf4a943f21f4c28b27f55f98819996673044720e25e263c 26997 chromium_150.0.7871.124-1~deb12u1_source.buildinfo
Files:
b52a7f7dbe14bd8ee167b495986437cf 4068 web optional chromium_150.0.7871.124-1~deb12u1.dsc
aca404ee4f0888c74efeb1e62c60bfc4 941311420 web optional chromium_150.0.7871.124.orig.tar.xz
7d255e79c301044925dc4ea701d6e3cb 8622496 web optional chromium_150.0.7871.124-1~deb12u1.debian.tar.xz
f9f283b4687894a97d5d040dd7ecef95 26997 web optional chromium_150.0.7871.124-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=NG4K
-----END PGP SIGNATURE-----
