-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 18 Sep 2026 01:16:02 -0400
Source: chromium
Architecture: source
Version: 153.0.8010.52-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (153.0.8010.52-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer.
- CVE-2026-93372: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-93375: Incorrect reference resolution in Tracing.
Reported by M. Fauzan Wijaya (Gh05t666nero).
- CVE-2026-93382: Use after free in PDFium.
Reported by WinD39 - Huynh Dinh Vu.
- CVE-2026-93387: Improper state validation in Skia. Reported by Google.
- CVE-2026-93373: Use after free in Extensions. Reported by Google.
- CVE-2026-93381: Buffer overflow in PDFium.
Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722).
- CVE-2026-93379: Incorrect authorization in ORB.
Reported by OGINOME Tomohito.
- CVE-2026-93377: Type confusion in V8. Reported by Google.
- CVE-2026-93380: Race condition in FileSystem. Reported by Google.
- CVE-2026-93384: Server-side request forgery in Omnibox.
Reported by Google.
- CVE-2026-93383: Information leak in Permissions. Reported by Google.
- CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google.
- CVE-2026-93378: Missing authorization in Storage. Reported by Google.
- CVE-2026-93385: Information leak in Paint. Reported by Google.
- CVE-2026-93386: UI misrepresentation in WebAppInstalls.
Reported by Google.
Checksums-Sha1:
b36ad6b1431d0d142957f1b8a5f2357a6a8c2400 4410 chromium_153.0.8010.52-1.dsc
bba0f658e4a754b040a96510d0c01c171386fbfa 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
cd83a6f74e77ab0369bf7ef3931a8777ef30ca60 963995224 chromium_153.0.8010.52.orig.tar.xz
f59b207a098ff186cca747e4e3a1516359931fac 563652 chromium_153.0.8010.52-1.debian.tar.xz
061075acdfbe16ebfea0783186246698cd77cc84 27194 chromium_153.0.8010.52-1_source.buildinfo
Checksums-Sha256:
f8a408196adbda9c3d36501049335c07767bff9005666afa3d652f15481c2745 4410 chromium_153.0.8010.52-1.dsc
1ad6693cb92e1b02d2c11f620f307adcdf5fd7fa6863463f813954e5394bc21b 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
949683889f9a6c91f9240e089e527c39627bfc2265c3986a4cc9b910e53f4da1 963995224 chromium_153.0.8010.52.orig.tar.xz
0d3561ca2b921fcc37d9c5648da7fe31eabad5df11bd5ceb8dbc8a0dbca1683f 563652 chromium_153.0.8010.52-1.debian.tar.xz
51d3030f1724970b7e1f74c1f024d96227a95efc0130c721d656ff37d26a0e09 27194 chromium_153.0.8010.52-1_source.buildinfo
Files:
c608fa10748ed4cbeba855d63c1b7dca 4410 web optional chromium_153.0.8010.52-1.dsc
ba62095447a5d4849bd7856f9d1c27b1 16117132 web optional chromium_153.0.8010.52.orig-pre-gen.tar.xz
5eeb0c96695c26a29a0ef8981904536f 963995224 web optional chromium_153.0.8010.52.orig.tar.xz
ec007a58f97036d2b445327331733657 563652 web optional chromium_153.0.8010.52-1.debian.tar.xz
477bdb5c19753278c8b3d64e1231b5be 27194 web optional chromium_153.0.8010.52-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=zKqW
-----END PGP SIGNATURE-----
