-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 18 Sep 2026 01:16:02 -0400
Source: chromium
Architecture: source
Version: 153.0.8010.52-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (153.0.8010.52-1~deb12u1) bookworm-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer.
- CVE-2026-93372: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-93375: Incorrect reference resolution in Tracing.
Reported by M. Fauzan Wijaya (Gh05t666nero).
- CVE-2026-93382: Use after free in PDFium.
Reported by WinD39 - Huynh Dinh Vu.
- CVE-2026-93387: Improper state validation in Skia. Reported by Google.
- CVE-2026-93373: Use after free in Extensions. Reported by Google.
- CVE-2026-93381: Buffer overflow in PDFium.
Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722).
- CVE-2026-93379: Incorrect authorization in ORB.
Reported by OGINOME Tomohito.
- CVE-2026-93377: Type confusion in V8. Reported by Google.
- CVE-2026-93380: Race condition in FileSystem. Reported by Google.
- CVE-2026-93384: Server-side request forgery in Omnibox.
Reported by Google.
- CVE-2026-93383: Information leak in Permissions. Reported by Google.
- CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google.
- CVE-2026-93378: Missing authorization in Storage. Reported by Google.
- CVE-2026-93385: Information leak in Paint. Reported by Google.
- CVE-2026-93386: UI misrepresentation in WebAppInstalls.
Reported by Google.
Checksums-Sha1:
89487e6c28c8caeab7b6a84f90c0d8477fe9f8bc 4393 chromium_153.0.8010.52-1~deb12u1.dsc
bba0f658e4a754b040a96510d0c01c171386fbfa 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
cd83a6f74e77ab0369bf7ef3931a8777ef30ca60 963995224 chromium_153.0.8010.52.orig.tar.xz
535c9324bab297fd40b43b9c772abd7b3903024e 572000 chromium_153.0.8010.52-1~deb12u1.debian.tar.xz
91aabf1537638b38e7922198cd235f7e7c759bad 27280 chromium_153.0.8010.52-1~deb12u1_source.buildinfo
Checksums-Sha256:
bd54bc85c6efd6d5d2fc478f9477a01dc576eea00be3ea39dccb8b7ae90d55f5 4393 chromium_153.0.8010.52-1~deb12u1.dsc
1ad6693cb92e1b02d2c11f620f307adcdf5fd7fa6863463f813954e5394bc21b 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
949683889f9a6c91f9240e089e527c39627bfc2265c3986a4cc9b910e53f4da1 963995224 chromium_153.0.8010.52.orig.tar.xz
ac06a038b39e350ca93f7f1497d2b4396c1d2cb254fbfc932cbee0a0d17f08ea 572000 chromium_153.0.8010.52-1~deb12u1.debian.tar.xz
901f672aa52be0067eb78ecc2eb0f7fb4f630b340329c143fdfd5e3f2446703e 27280 chromium_153.0.8010.52-1~deb12u1_source.buildinfo
Files:
006207514780d1af6fc08a0d1fa19b82 4393 web optional chromium_153.0.8010.52-1~deb12u1.dsc
ba62095447a5d4849bd7856f9d1c27b1 16117132 web optional chromium_153.0.8010.52.orig-pre-gen.tar.xz
5eeb0c96695c26a29a0ef8981904536f 963995224 web optional chromium_153.0.8010.52.orig.tar.xz
fe2ae2b6c6279e85ab06b7ec9fa14e89 572000 web optional chromium_153.0.8010.52-1~deb12u1.debian.tar.xz
3f1d7369e65d84c993cd752e40e81252 27280 web optional chromium_153.0.8010.52-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=rV/C
-----END PGP SIGNATURE-----
