-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 18 Sep 2026 01:16:02 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 153.0.8010.52-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (153.0.8010.52-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer. - CVE-2026-93372: Buffer overflow in WebGL. Reported by Google. - CVE-2026-93375: Incorrect reference resolution in Tracing. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-93382: Use after free in PDFium. Reported by WinD39 - Huynh Dinh Vu. - CVE-2026-93387: Improper state validation in Skia. Reported by Google. - CVE-2026-93373: Use after free in Extensions. Reported by Google. - CVE-2026-93381: Buffer overflow in PDFium. Reported by SeungMyung Lee (@sm1ee), Siung kim (@ksw9722). - CVE-2026-93379: Incorrect authorization in ORB. Reported by OGINOME Tomohito. - CVE-2026-93377: Type confusion in V8. Reported by Google. - CVE-2026-93380: Race condition in FileSystem. Reported by Google. - CVE-2026-93384: Server-side request forgery in Omnibox. Reported by Google. - CVE-2026-93383: Information leak in Permissions. Reported by Google. - CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google. - CVE-2026-93378: Missing authorization in Storage. Reported by Google. - CVE-2026-93385: Information leak in Paint. Reported by Google. - CVE-2026-93386: UI misrepresentation in WebAppInstalls. Reported by Google. Checksums-Sha1: 37d1b6c65cb90196a0020f51ebf8660e9ee0bd14 2194064 chromium-common-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb a2d54d50bef4dd30efc27d1bd96cfc16bdc5f1a3 30890908 chromium-common_153.0.8010.52-1~deb13u1_amd64.deb bc6a79dd47bcf5719ab1fce8bd7709422971dae8 32149832 chromium-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb f4d9e571ecdece35ff02c97aa9a85ba7a0e151a9 8436696 chromium-driver_153.0.8010.52-1~deb13u1_amd64.deb a74c59497070052c1113dc58bc0aa09fd50b826d 26486948 chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 646262b8d2e68222f1d826df2c69091889400c56 65609648 chromium-headless-shell_153.0.8010.52-1~deb13u1_amd64.deb 060d54973799c498e4280044f9037becf88f44d0 20260 chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb ae36c518c9be13967da91b121bb6259d93d2c9ed 148932 chromium-sandbox_153.0.8010.52-1~deb13u1_amd64.deb 81a7bcf093f50131fbb2e58e115f8389b7d23f22 28154660 chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 3296a50137a1b8f1721ffba37c49932b49120e1a 65157120 chromium-shell_153.0.8010.52-1~deb13u1_amd64.deb db5d683f58415a80061a834d7dc674e7d3e88995 31518 chromium_153.0.8010.52-1~deb13u1_amd64-buildd.buildinfo cba3354c820541783ce36169e78e1bed91204a8c 90070088 chromium_153.0.8010.52-1~deb13u1_amd64.deb Checksums-Sha256: 4fbd29af914d8b641a923f4c36004d66a0a6644b26bbfcb0c63d4b11b49af335 2194064 chromium-common-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 76a51db0b4fa8b254c9f703cbf1c1eb3e17ad3d7b87b9257ea57811f418fa2eb 30890908 chromium-common_153.0.8010.52-1~deb13u1_amd64.deb d986437f778eb4a570f021f5480f7894ea33f50f005e660c542e59dce008bf4d 32149832 chromium-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb b5e60b07ebcb68018e42cce458ebc828b115c2c4f6b808792e3ccac91e3764e3 8436696 chromium-driver_153.0.8010.52-1~deb13u1_amd64.deb 72fb682c8fa21bee3281861de8f261ce7ccd7d7471f1f81ddb7aca5adf832293 26486948 chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb ab5402ead6a3a8634181fb48496539c757d8330c066d7004f8ea61590eacbfe6 65609648 chromium-headless-shell_153.0.8010.52-1~deb13u1_amd64.deb 59cba6b7972894486f1c07e9d41710182b5f8be7b299332cabf4155fb5224954 20260 chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb e229cb2eebe99093f7959f2c6698d61e3cc2779a05036dbf879ac4a5b5a27dba 148932 chromium-sandbox_153.0.8010.52-1~deb13u1_amd64.deb ec0b5f6157834d9a01639074c4b29dd55eae535111d434fb9ae88fa5b84a939f 28154660 chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 69deb99e550991cbf6726e77eabcf223c7d333c8a333e07ba6b89a0a3ebf0bdb 65157120 chromium-shell_153.0.8010.52-1~deb13u1_amd64.deb 0ddc465bc1858124a10a36126cd3a5e2d7faa5d64f63e7e1f569239d8c004f3d 31518 chromium_153.0.8010.52-1~deb13u1_amd64-buildd.buildinfo ebfb3fb7f763915469afa656cabcc000348cbe2e6afa20b7cc9db6cf796b3074 90070088 chromium_153.0.8010.52-1~deb13u1_amd64.deb Files: f6f4ee0a98d052c439ca20b5975b9f74 2194064 debug optional chromium-common-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 067a28434ab7702abac3b30861300d19 30890908 web optional chromium-common_153.0.8010.52-1~deb13u1_amd64.deb 7f087a20e67e5482050076ab72e60e9e 32149832 debug optional chromium-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 8aae1787399e5994166a223508816f02 8436696 web optional chromium-driver_153.0.8010.52-1~deb13u1_amd64.deb 72f8b2f30059efa711a9385ce48c8a97 26486948 debug optional chromium-headless-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb b9a880254ce8e3ad55f63814c36b393c 65609648 web optional chromium-headless-shell_153.0.8010.52-1~deb13u1_amd64.deb 682dbd9565c46f1580fe9154b6097946 20260 debug optional chromium-sandbox-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb d27b36ef0ed59c9713a8dc17ad8ff2ba 148932 web optional chromium-sandbox_153.0.8010.52-1~deb13u1_amd64.deb effec45eef870f7efc0f47d23593e9de 28154660 debug optional chromium-shell-dbgsym_153.0.8010.52-1~deb13u1_amd64.deb 72e5c232cd1eb25d4e7fbebb0ce8835c 65157120 web optional chromium-shell_153.0.8010.52-1~deb13u1_amd64.deb cc582485a8540bc93464ef3f6fd23e49 31518 web optional chromium_153.0.8010.52-1~deb13u1_amd64-buildd.buildinfo e445e5d20fab4c121d98e7234e03ddfe 90070088 web optional chromium_153.0.8010.52-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmqvGRYACgkQPkCWRKsh 20dJJQ/+Jk3WlJ+2eCC9IWQhV0Ja4kBiSGk5Jg/p0CWcwyGS2/sif08E/8xwFKR7 HGiiKdO7bV1fBmSPsi1qONzvnjImoCJ8XdsP2kgHBoYo8xBq4fxA72bzB5gkT/GX nVRDKJ05E+zNv/6vKMbl96z5APdJy4cxb4HsxvOvWtOLdsbQdUJcXawpkcTX+hFF QQ+6vK+RITi7tegs6k1qr4sAvq2kXemB3Vc7p1ttW+Tl/ySd3RJDuL6IF/B2UxT6 cXrTiRdzGjx0eduQIvpnLBGBbciTYhKlDtbGJSnD4sl9cjp0PaAe7G9hmxs5NbyI GAvXRwD0ABny76SSRFo/EuZiWTQ6QG0aEPOcmEUBr6NWhQ13wWvB0WOmdZ7nhcdD 9f1VKOSec3GrE/PpFiCBFLKdvaFFB5TZyCGt4U90YUt7NbG3FBGY0WEyTcppZk1s VmrlWs6B+tjD0ksQP6P8finiYHmOwWdM13mIfamMat8WRQ3p3Ok/snVHTwzGkQad AmTrVEHV4RNihWx3dBeuAphqKpoutVa8aq8VjQ0c2mRkRNOFvfaiy1RBeuhKL/U1 JyzWCIDIsplBYLEXsF0xmqcMx2MCubtfTylmKVWPgDEtCYKY4//IVyURHHUd1ITi 7axW/pCdjTawKf7eDdekTvaMzRnFnhSuq/ZhI5kmDhRysSPaak8= =j5pa -----END PGP SIGNATURE-----