-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 21 Jul 2026 23:21:54 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.181-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (150.0.7871.181-1~deb12u1) bookworm-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-15899: Use after free in CameraCapture. Reported by Google.
- CVE-2026-15900: Use after free in GPU. Reported by Google.
- CVE-2026-15901: Use after free in Network. Reported by Google.
- CVE-2026-15902: Use after free in Cast. Reported by Google.
- CVE-2026-15903: Out of bounds read and write in V8.
Reported by OpenAI Codex Security (amyb).
- CVE-2026-15904: Use after free in Ozone. Reported by Google.
- CVE-2026-15905: Use after free in Aura. Reported by Google.
- CVE-2026-16420: Type Confusion in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16421: Inappropriate implementation in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16413: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-16414: Insufficient validation of untrusted input in
Chromecast. Reported by Google.
- CVE-2026-16415: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-16416: Integer overflow in Chromecast. Reported by Google.
- CVE-2026-16417: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-16418: Stack buffer overflow in V8. Reported by Google.
- CVE-2026-16419: Out of bounds read and write in ANGLE.
Reported by Google.
- CVE-2026-16422: Insufficient validation of untrusted input in
Certificate. Reported by Google.
- CVE-2026-16423: Use after free in UI. Reported by Google.
- CVE-2026-16424: Use after free in GPU. Reported by Google.
Checksums-Sha1:
5ed97ffb5eb7e3ce30101806bdb8f912c58c1e4b 4068 chromium_150.0.7871.181-1~deb12u1.dsc
49854710836035db27072c81203be9b2a9b96546 941240556 chromium_150.0.7871.181.orig.tar.xz
074bc31dfe005ec8f9adddd728c2127d541d68ea 8622608 chromium_150.0.7871.181-1~deb12u1.debian.tar.xz
010e382973ac98464a1a33c4e9dac17a3f70ad71 27029 chromium_150.0.7871.181-1~deb12u1_source.buildinfo
Checksums-Sha256:
84b3d72f8d915f070fd0b43fe2a8071d438a31ab96ac83adf494791af1b54451 4068 chromium_150.0.7871.181-1~deb12u1.dsc
0e03ca671e0d01e497230193923cddf2a1113a440481c1796ca29c6ffab6f578 941240556 chromium_150.0.7871.181.orig.tar.xz
758efdcc0e44150d2158801d2fbb67baf07e8c91fc025eaca11585547367b65a 8622608 chromium_150.0.7871.181-1~deb12u1.debian.tar.xz
8500176e95d5c34d35c0ce68cbfdc8ad65eb867c86146ea66803f51c8d8b400f 27029 chromium_150.0.7871.181-1~deb12u1_source.buildinfo
Files:
e724b15cd1b76f0b5f9ce43637e5f6ec 4068 web optional chromium_150.0.7871.181-1~deb12u1.dsc
a7624e3abc7c34cddfd5d69278fd3a72 941240556 web optional chromium_150.0.7871.181.orig.tar.xz
1b9311df0d33b0d797f58f030a0c6243 8622608 web optional chromium_150.0.7871.181-1~deb12u1.debian.tar.xz
fe70f508ade29a0f7c02480ab9e40933 27029 web optional chromium_150.0.7871.181-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=IPc6
-----END PGP SIGNATURE-----
