-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 21 Jul 2026 23:21:54 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.181-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (150.0.7871.181-1~deb13u1) trixie-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-15899: Use after free in CameraCapture. Reported by Google.
- CVE-2026-15900: Use after free in GPU. Reported by Google.
- CVE-2026-15901: Use after free in Network. Reported by Google.
- CVE-2026-15902: Use after free in Cast. Reported by Google.
- CVE-2026-15903: Out of bounds read and write in V8.
Reported by OpenAI Codex Security (amyb).
- CVE-2026-15904: Use after free in Ozone. Reported by Google.
- CVE-2026-15905: Use after free in Aura. Reported by Google.
- CVE-2026-16420: Type Confusion in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16421: Inappropriate implementation in WebAudio.
Reported by Found by XBOW and triaged by Brendan Dolan-Gavitt.
- CVE-2026-16413: Out of bounds write in ANGLE. Reported by Google.
- CVE-2026-16414: Insufficient validation of untrusted input in
Chromecast. Reported by Google.
- CVE-2026-16415: Insufficient validation of untrusted input in
Extensions. Reported by Google.
- CVE-2026-16416: Integer overflow in Chromecast. Reported by Google.
- CVE-2026-16417: Uninitialized Use in Skia. Reported by Google.
- CVE-2026-16418: Stack buffer overflow in V8. Reported by Google.
- CVE-2026-16419: Out of bounds read and write in ANGLE.
Reported by Google.
- CVE-2026-16422: Insufficient validation of untrusted input in
Certificate. Reported by Google.
- CVE-2026-16423: Use after free in UI. Reported by Google.
- CVE-2026-16424: Use after free in GPU. Reported by Google.
Checksums-Sha1:
52ed8cbbfca9ebd22ac6fc2bc7876fc0b6c33396 4099 chromium_150.0.7871.181-1~deb13u1.dsc
49854710836035db27072c81203be9b2a9b96546 941240556 chromium_150.0.7871.181.orig.tar.xz
596b44a6a320714523ae29bb926eaf4e27482c60 536824 chromium_150.0.7871.181-1~deb13u1.debian.tar.xz
123c7e04a12b70eab97cda38becc7ea0a5901e8d 27320 chromium_150.0.7871.181-1~deb13u1_source.buildinfo
Checksums-Sha256:
8cc28beda0a8eb65b25fd2acd6433460c5f048caf689c14b4f4f159b4e34cf7c 4099 chromium_150.0.7871.181-1~deb13u1.dsc
0e03ca671e0d01e497230193923cddf2a1113a440481c1796ca29c6ffab6f578 941240556 chromium_150.0.7871.181.orig.tar.xz
87895b68020096247ab8ab76825165083b3e8077327ad64e21ab266439643b16 536824 chromium_150.0.7871.181-1~deb13u1.debian.tar.xz
0817f887f1d75f7e609ffb926d47d7db1c73f053caabc7f5d91210c58ef74b1f 27320 chromium_150.0.7871.181-1~deb13u1_source.buildinfo
Files:
19e874112a9cce04bf723e130f2abdd2 4099 web optional chromium_150.0.7871.181-1~deb13u1.dsc
a7624e3abc7c34cddfd5d69278fd3a72 941240556 web optional chromium_150.0.7871.181.orig.tar.xz
a3959b764dc9edbec5aab8a301583edb 536824 web optional chromium_150.0.7871.181-1~deb13u1.debian.tar.xz
b441e0c78162757517c649dec4e61636 27320 web optional chromium_150.0.7871.181-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=w0Fc
-----END PGP SIGNATURE-----
