-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 18 Sep 2026 01:16:02 -0400
Source: chromium
Architecture: source
Version: 153.0.8010.52-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (153.0.8010.52-1~deb13u1) trixie-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer.
- CVE-2026-93372: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-93375: Incorrect reference resolution in Tracing.
Reported by M. Fauzan Wijaya (Gh05t666nero).
- CVE-2026-93382: Use after free in PDFium.
Reported by WinD39 - Huynh Dinh Vu.
- CVE-2026-93387: Improper state validation in Skia. Reported by Google.
- CVE-2026-93373: Use after free in Extensions. Reported by Google.
- CVE-2026-93381: Buffer overflow in PDFium.
Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722).
- CVE-2026-93379: Incorrect authorization in ORB.
Reported by OGINOME Tomohito.
- CVE-2026-93377: Type confusion in V8. Reported by Google.
- CVE-2026-93380: Race condition in FileSystem. Reported by Google.
- CVE-2026-93384: Server-side request forgery in Omnibox.
Reported by Google.
- CVE-2026-93383: Information leak in Permissions. Reported by Google.
- CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google.
- CVE-2026-93378: Missing authorization in Storage. Reported by Google.
- CVE-2026-93385: Information leak in Paint. Reported by Google.
- CVE-2026-93386: UI misrepresentation in WebAppInstalls.
Reported by Google.
Checksums-Sha1:
debaebfae37a550506c92cb1d083f728b31afbba 4431 chromium_153.0.8010.52-1~deb13u1.dsc
bba0f658e4a754b040a96510d0c01c171386fbfa 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
cd83a6f74e77ab0369bf7ef3931a8777ef30ca60 963995224 chromium_153.0.8010.52.orig.tar.xz
5804f17ab86b865150756c4bef24f547541f8773 564176 chromium_153.0.8010.52-1~deb13u1.debian.tar.xz
4ba597a6f0460711e85a26989fcb807e859af3bd 28011 chromium_153.0.8010.52-1~deb13u1_source.buildinfo
Checksums-Sha256:
b4816efd50ec87edf960bca48e7cfe7180b350a3f2f6af44ddec4edd382526e2 4431 chromium_153.0.8010.52-1~deb13u1.dsc
1ad6693cb92e1b02d2c11f620f307adcdf5fd7fa6863463f813954e5394bc21b 16117132 chromium_153.0.8010.52.orig-pre-gen.tar.xz
949683889f9a6c91f9240e089e527c39627bfc2265c3986a4cc9b910e53f4da1 963995224 chromium_153.0.8010.52.orig.tar.xz
5c7ed90f694752aa774224a558e56ea0bb0b4b9950899431b161a484e0c29dfd 564176 chromium_153.0.8010.52-1~deb13u1.debian.tar.xz
d1b756d77bc5fea89d9ee56fb23d520fc9518cc046bf4d40ddee7443a171c5b1 28011 chromium_153.0.8010.52-1~deb13u1_source.buildinfo
Files:
f827893c5aee393f69dd84f8303b69dd 4431 web optional chromium_153.0.8010.52-1~deb13u1.dsc
ba62095447a5d4849bd7856f9d1c27b1 16117132 web optional chromium_153.0.8010.52.orig-pre-gen.tar.xz
5eeb0c96695c26a29a0ef8981904536f 963995224 web optional chromium_153.0.8010.52.orig.tar.xz
351b888e871347ea7e1b015543c50b4b 564176 web optional chromium_153.0.8010.52-1~deb13u1.debian.tar.xz
8f9fcc03472228f9da77e70c62969380 28011 web optional chromium_153.0.8010.52-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=OP2k
-----END PGP SIGNATURE-----
