-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jun 2026 17:27:35 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 149.0.7827.114-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.114-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12007: Use after free  Core. Reported by Google. - CVE-2026-12008: Use after free  DigitalCredentials. Reported by Google. - CVE-2026-12009: Insufficient validation of untrusted input Accessibility. Reported by Google. - CVE-2026-12010: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12011: Use after free  WebMIDI. Reported by Google. - CVE-2026-12012: Use after free  Network. Reported by Google. - CVE-2026-12013: Use after free  Media. Reported by Henock Habte, Independent Security Researcher. - CVE-2026-12014: Use after free  Cast. Reported by Google. - CVE-2026-12015: Use after free  Autofill. Reported by Google. - CVE-2026-12016: Insufficient validation of untrusted input  DevTools. Reported by Google. - CVE-2026-12017: Insufficient validation of untrusted input Extensions. Reported by Google. - CVE-2026-12018: Inappropriate implementation  Mojo. Reported by Google. - CVE-2026-12019: Out of bounds write  Codecs. Reported by Google. - CVE-2026-12020: Use after free  Autofill. Reported by Google. - CVE-2026-12022: Race  Safe Browsing. Reported by Google. - CVE-2026-12023: Use after free  GPU. Reported by Google. - CVE-2026-12024: Insufficient policy enforcement  DevTools. Reported by Google. - CVE-2026-12025: Insufficient validation of untrusted input  Network. Reported by Google. - CVE-2026-12026: Out of bounds read  Video. Reported by Google. - CVE-2026-12027: Insufficient policy enforcement  Headless. Reported by Google. - CVE-2026-12028: Use after free  GPU. Reported by Google. - CVE-2026-12029: Use after free  Video. Reported by Google. - CVE-2026-12030: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12031: Inappropriate implementation  Views. Reported by Google - CVE-2026-12032: Inappropriate implementation  Passwords. Reported by Google. - CVE-2026-12033: Out of bounds read  VideoCapture. Reported by Google. - CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming. Reported by Google. - CVE-2026-12035: Use after free  Views. Reported by Google. Checksums-Sha1: 9b7c519b8a08867f13cfb4fdf3659f3d6bb112ad 5491696 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 66a96cf860951cad3d9f4bd8f79d2bbc51c7fe33 26260908 chromium-common_149.0.7827.114-1~deb12u1_amd64.deb cdd39be868a75017ae442745853fc0d4cde9e61e 35992592 chromium-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb f3967ad515156dc3ea2ce1256f84d9688add5761 7744640 chromium-driver_149.0.7827.114-1~deb12u1_amd64.deb d1347a399b1612a99462bcdd92882525f3cb1953 29604960 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 9ef52d6fdb126f99d1faa6ab5b97bcdc98aa7368 58167164 chromium-headless-shell_149.0.7827.114-1~deb12u1_amd64.deb 0f8ca74880c03311e0c61acdeab61d13ffe2bb72 19292 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 893938cd041004e5e1052e111ee142ba605c3973 127788 chromium-sandbox_149.0.7827.114-1~deb12u1_amd64.deb 143b81dc42bc5169832daf212abdf8ea579a32e7 32548108 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb fbb961b6f4be97bef7d14e2109c8c95f92fc0f7b 63816304 chromium-shell_149.0.7827.114-1~deb12u1_amd64.deb 972d67186a579050f6ccd8274451ed4d95e04b79 30488 chromium_149.0.7827.114-1~deb12u1_amd64-buildd.buildinfo d006ff7eaa77e4221fb3012f452a1cc91bf7b263 75546344 chromium_149.0.7827.114-1~deb12u1_amd64.deb Checksums-Sha256: 51846be7e320e7046662eb8908854043c7163351a15b4243821f764fd1e62e6b 5491696 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb b693ad003bc6f9bffe4c61a23309fd223b8e782f013f7f112cc0878f929d0176 26260908 chromium-common_149.0.7827.114-1~deb12u1_amd64.deb 88c9ae8dee6e323e9e4a4cc73a8ac46468940cf6635e76a2371565ee3339da93 35992592 chromium-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 1ae7de00c713fd2a645c949ecccb4cc34fc04dd9d44b982d64abb7592c2af421 7744640 chromium-driver_149.0.7827.114-1~deb12u1_amd64.deb 5e77dfd0749b9a5adc5441af42a47dc8d061fcfa2fff7abf2a8443b66cf0c46a 29604960 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 5ac68a82f88f68f7ee6ae765095ade31a741b729886445b64a3365abb0e1940d 58167164 chromium-headless-shell_149.0.7827.114-1~deb12u1_amd64.deb 3d5238a247bb18626a609822de775b3acd63c33267f0ce522019e418d64e9346 19292 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 083824fe992327ab86096cdc28d037a792f0e5a99d798dc0f6ae865c173db31e 127788 chromium-sandbox_149.0.7827.114-1~deb12u1_amd64.deb 8bb7159af8addbf5176bf713a49257d6119e47b4cf19d0486b772846d1304532 32548108 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 5eff4c29be2c959a83f9315aef78291e7259d56cdb1abb96b56d0931bcdd8187 63816304 chromium-shell_149.0.7827.114-1~deb12u1_amd64.deb 09ae3725a968249054cd088dbd2457f3e29c972278e391ba765c9ba8b0b34233 30488 chromium_149.0.7827.114-1~deb12u1_amd64-buildd.buildinfo b61d89b9cc539935d1cf9832f274192479842248985d71a94aaa1f2369dcb20b 75546344 chromium_149.0.7827.114-1~deb12u1_amd64.deb Files: 43ecc61e249ffe177ab2c5daf9c5b6f9 5491696 debug optional chromium-common-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 82e10e1ab5e268d7a146d16b757fd630 26260908 web optional chromium-common_149.0.7827.114-1~deb12u1_amd64.deb 7603d99d47ba62b7b5c9758e61158225 35992592 debug optional chromium-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 8f1d984c58b0d1e0ef746c43fd402479 7744640 web optional chromium-driver_149.0.7827.114-1~deb12u1_amd64.deb 23a617a7e78da32a37f9c9a5d1f7312c 29604960 debug optional chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 60d4d5bcfaf374cb793df1ba87864896 58167164 web optional chromium-headless-shell_149.0.7827.114-1~deb12u1_amd64.deb dd237be44683e070069fea78ce9b5a75 19292 debug optional chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb 399d3d7802d430b27b36953958f88c7a 127788 web optional chromium-sandbox_149.0.7827.114-1~deb12u1_amd64.deb 6284179fb4cf39372db7d0c40fd08bd9 32548108 debug optional chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_amd64.deb d127fec92762e69e7b9ad1c6db14aa4e 63816304 web optional chromium-shell_149.0.7827.114-1~deb12u1_amd64.deb 3e0057a0ed8f07e43cff4ae2f2e7016b 30488 web optional chromium_149.0.7827.114-1~deb12u1_amd64-buildd.buildinfo aea8409f570bf7c3e958ae80d7484fb2 75546344 web optional chromium_149.0.7827.114-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmotfDUACgkQPkCWRKsh 20eunhAAoR9iewsQ1P4WsOHP/s1awQkEoDgz7NXx/BlHfUgaGrG225EwmOJrEIxu hbfJCoa1ED+9a7bP3fXctgvIHVmmg7H90Zq1bfNBeYiOFYJGTnEQeG/h9aSDmUKH SMPKqpcosTR93C9iMSQ91WqqESnzHhyB6xTOEBoV6qVmeBzbkeBEskBhMxCV4MCN 1nJTRn0GsB9LiiFnUn/I7sEnFa1gd1Xjk+5aZzFHfu2hAk364M8nHeMnLGxQCbwc eOewCdD+PhSYoVgPFqpSX7z3wnzfLGmwtoAxPr5nclng/0r8NZIOuKlNlwdqpy5f K3fHPgDXX96L7K32Ql6/VPgZkdkli8k092A65ubQX4+v8u7TJ86VGaX+HysX3LU1 DucAP64ZfgNlF+7MZ+JMVyXVkku6K8IUD4IxzfxmF4QXTS7KyesaorBu5tnVi3Sy e1bedu1k7wNDjQz8M8kcyxcMlM6f8BCsJiusi8G1a6x1/fr9daQBaBACQLYs0B8/ GhpHCmwZrfA7sgiX/8RRRZ1Y8KCn0esSUphnS29p7u2wMBdu/IXravNnXqomI5v5 tAihLC3uiKHouOE5BBvorLF+ebwlMBOuef1i+bnXsyML1uhD59dO3LTbO3W5qdO9 Ci/h0NbGAN8iWRugN6y0tD2GgN0iNCmMwKPNfW/vqcKlY484YHk= =jh5X -----END PGP SIGNATURE-----