-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 21 Jul 2026 23:21:54 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.181-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (150.0.7871.181-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-15899: Use after free in CameraCapture. Reported by Google.
- CVE-2026-15900: Use after free in GPU. Reported by Google.
- CVE-2026-15901: Use after free in Network. Reported by Google.
- CVE-2026-15902: Use after free in Cast. Reported by Google.
- CVE-2026-15903: Out of bounds read and write in V8.
Reported by OpenAI Codex Security (amyb).
- CVE-2026-15904: Use after free in Ozone. Reported by Google.
- CVE-2026-15905: Use after free in Aura. Reported by Google.
- CVE-2026-16420: Type Confusion in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16421: Inappropriate implementation in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16413: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-16414: Insufficient validation of untrusted input in
Chromecast. Reported by Google.
- CVE-2026-16415: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-16416: Integer overflow in Chromecast. Reported by Google.
- CVE-2026-16417: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-16418: Stack buffer overflow in V8. Reported by Google.
- CVE-2026-16419: Out of bounds read and write in ANGLE.
Reported by Google.
- CVE-2026-16422: Insufficient validation of untrusted input in
Certificate. Reported by Google.
- CVE-2026-16423: Use after free in UI. Reported by Google.
- CVE-2026-16424: Use after free in GPU. Reported by Google.
Checksums-Sha1:
052a876d01eedcc5ac1dee2ab885c9748b3f4e87 4079 chromium_150.0.7871.181-1.dsc
49854710836035db27072c81203be9b2a9b96546 941240556 chromium_150.0.7871.181.orig.tar.xz
a6f4b6eb24110e70049352f16c894111aba2f0ae 536696 chromium_150.0.7871.181-1.debian.tar.xz
b98d9f6cc61726cf583c73e043cf4554dddcebbd 28106 chromium_150.0.7871.181-1_source.buildinfo
Checksums-Sha256:
f2a69ef0f5dfa11b263cceaf7bc295eee2060f5c7232d524f90fd38f0243786c 4079 chromium_150.0.7871.181-1.dsc
0e03ca671e0d01e497230193923cddf2a1113a440481c1796ca29c6ffab6f578 941240556 chromium_150.0.7871.181.orig.tar.xz
c17fccdf3a7f92243a90ad7e7f5c0b4119e1475acd2b8af7ebfae4f4cc1b990d 536696 chromium_150.0.7871.181-1.debian.tar.xz
8cc88ef9190f80a8e4e1f2e478f9ec90e74bce39cbbb2fb1e5cbfa654e451dcd 28106 chromium_150.0.7871.181-1_source.buildinfo
Files:
364101d133ffc84b3935e2fdbc58b25f 4079 web optional chromium_150.0.7871.181-1.dsc
a7624e3abc7c34cddfd5d69278fd3a72 941240556 web optional chromium_150.0.7871.181.orig.tar.xz
e320f8ba1cb663ff9eb6deed86b89251 536696 web optional chromium_150.0.7871.181-1.debian.tar.xz
dc9dd5c0b4b9b4016a3bf69237ce0f19 28106 web optional chromium_150.0.7871.181-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=hmdW
-----END PGP SIGNATURE-----
