-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jun 2026 17:27:35 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 149.0.7827.114-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (149.0.7827.114-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-12007: Use after free  Core. Reported by Google. - CVE-2026-12008: Use after free  DigitalCredentials. Reported by Google. - CVE-2026-12009: Insufficient validation of untrusted input Accessibility. Reported by Google. - CVE-2026-12010: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12011: Use after free  WebMIDI. Reported by Google. - CVE-2026-12012: Use after free  Network. Reported by Google. - CVE-2026-12013: Use after free  Media. Reported by Henock Habte, Independent Security Researcher. - CVE-2026-12014: Use after free  Cast. Reported by Google. - CVE-2026-12015: Use after free  Autofill. Reported by Google. - CVE-2026-12016: Insufficient validation of untrusted input  DevTools. Reported by Google. - CVE-2026-12017: Insufficient validation of untrusted input Extensions. Reported by Google. - CVE-2026-12018: Inappropriate implementation  Mojo. Reported by Google. - CVE-2026-12019: Out of bounds write  Codecs. Reported by Google. - CVE-2026-12020: Use after free  Autofill. Reported by Google. - CVE-2026-12022: Race  Safe Browsing. Reported by Google. - CVE-2026-12023: Use after free  GPU. Reported by Google. - CVE-2026-12024: Insufficient policy enforcement  DevTools. Reported by Google. - CVE-2026-12025: Insufficient validation of untrusted input  Network. Reported by Google. - CVE-2026-12026: Out of bounds read  Video. Reported by Google. - CVE-2026-12027: Insufficient policy enforcement  Headless. Reported by Google. - CVE-2026-12028: Use after free  GPU. Reported by Google. - CVE-2026-12029: Use after free  Video. Reported by Google. - CVE-2026-12030: Heap buffer overflow  GPU. Reported by Google. - CVE-2026-12031: Inappropriate implementation  Views. Reported by Google - CVE-2026-12032: Inappropriate implementation  Passwords. Reported by Google. - CVE-2026-12033: Out of bounds read  VideoCapture. Reported by Google. - CVE-2026-12034: Insufficient validation of untrusted input  Linux Toolkit Theming. Reported by Google. - CVE-2026-12035: Use after free  Views. Reported by Google. Checksums-Sha1: 82015065ed6a97a6507bcd0a99b10e035ac4ba19 5314168 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_i386.deb c18bf6b064119ae8c0935f0eab9bbae9bf5ba269 26273388 chromium-common_149.0.7827.114-1~deb12u1_i386.deb 85d86d25d42db89d3900f69e40692cded93cf8cb 36206584 chromium-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 70d1ce33c11682c4c14d7d41b752816916cbb51e 8115496 chromium-driver_149.0.7827.114-1~deb12u1_i386.deb 45cf105b516ce10624dc658427a3d5722e26d67e 29780372 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 2a30b9a111df1d884b911379b81d884a4717080b 59821912 chromium-headless-shell_149.0.7827.114-1~deb12u1_i386.deb b4afdfacabe156c25554f5e0aa0fd7832055f461 17828 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 085fae4dc7040c6633d4cd2242966a1ada42038d 127648 chromium-sandbox_149.0.7827.114-1~deb12u1_i386.deb ba1af4013ff85a154075ec86dffa9012103f7376 32719052 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 6e07dac00801792bec0a577e2f6f9021fe9c45b4 65580720 chromium-shell_149.0.7827.114-1~deb12u1_i386.deb ada4e94b5c6262c629eb837659614f4b822219e3 30470 chromium_149.0.7827.114-1~deb12u1_i386-buildd.buildinfo 6a6c138f6bc0d90d79387249a5faaa7690c736a4 78073924 chromium_149.0.7827.114-1~deb12u1_i386.deb Checksums-Sha256: 14e42dc2b3b96f8795fdc5b21b5cce2577ecf30034a750a81d49c3956aafc628 5314168 chromium-common-dbgsym_149.0.7827.114-1~deb12u1_i386.deb f96f592f1aaad7137198d176baa3f570a6a68ca3c9091155e85a4ba313646014 26273388 chromium-common_149.0.7827.114-1~deb12u1_i386.deb 153a423c0954e7c175ea50a5e78c97b1e214982c9df8cab91822def6bad926b0 36206584 chromium-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 04c4e9e52eecb030b3dec19e41180de89c125948ce31c12929f5151748faf095 8115496 chromium-driver_149.0.7827.114-1~deb12u1_i386.deb 06addb0f82bc030f25b69a81342e800c1eda72ddaf65334f4a04b1ded64a80b7 29780372 chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 5a405db7fdcfa5ffa68f394511834bd209e118a3da9b44bdd2c142b865152c8d 59821912 chromium-headless-shell_149.0.7827.114-1~deb12u1_i386.deb 2bd6e8e440fe5f427ec4832f7c545bea94155c3466c62a57bb4c676703bdb20a 17828 chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_i386.deb abb0340a22228deeb4acfc30bcd58fe10227140a95d8bdc89415cf59a95aa9d3 127648 chromium-sandbox_149.0.7827.114-1~deb12u1_i386.deb 4c29bc82a4e075117833b394f24c5bedef66bd0751e9e7b2f1132e15138c4eba 32719052 chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 6909b35c6fde3482510c2ace9dcfce588c421ee84a0879ee0415336837e0f967 65580720 chromium-shell_149.0.7827.114-1~deb12u1_i386.deb ef60ceb97a1b74ef2bcda7402127f842db7318c56bd08c2d78be6a16b80a5286 30470 chromium_149.0.7827.114-1~deb12u1_i386-buildd.buildinfo 87c9f89a3469b4a18ea752ceb9c70158d65169ce5549ab2c5cb74a33400b266c 78073924 chromium_149.0.7827.114-1~deb12u1_i386.deb Files: 1fbe01835a32cd588b758efe1d9643f1 5314168 debug optional chromium-common-dbgsym_149.0.7827.114-1~deb12u1_i386.deb fbbd8323810f0edb09311fae14219281 26273388 web optional chromium-common_149.0.7827.114-1~deb12u1_i386.deb e62186d850cf0ef35b02f52c471550fe 36206584 debug optional chromium-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 707454d97f19bfcf47d5ef55bdb9392a 8115496 web optional chromium-driver_149.0.7827.114-1~deb12u1_i386.deb 5719548369d04e97fdb4ef3353c1f656 29780372 debug optional chromium-headless-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb f35e13426e345bd19f0a67affd64a4b2 59821912 web optional chromium-headless-shell_149.0.7827.114-1~deb12u1_i386.deb c9bce48c9dec9b6d3f49edfab0126590 17828 debug optional chromium-sandbox-dbgsym_149.0.7827.114-1~deb12u1_i386.deb ce61379dfdb6955edb49c186b05de83e 127648 web optional chromium-sandbox_149.0.7827.114-1~deb12u1_i386.deb ba0ecd165a0e1921f8f60762124e3084 32719052 debug optional chromium-shell-dbgsym_149.0.7827.114-1~deb12u1_i386.deb 82271ae273dcba6a2cbd6d339ea4571b 65580720 web optional chromium-shell_149.0.7827.114-1~deb12u1_i386.deb 67ae518e3a131857a6fd94c1d3691837 30470 web optional chromium_149.0.7827.114-1~deb12u1_i386-buildd.buildinfo a74d07e483a513addae336838b0221ca 78073924 web optional chromium_149.0.7827.114-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmotkp4ACgkQGNGWmfrq ILHZrg/7B7FgQYAFAi4dzUew6Y7WL+tM1iFgCe6M26gBRt7jj2gYaMkKNQdcqHNY EaA+6WPEd+KONSxE6VWp+VicFUQB9PNUB+7y2D1oFEwP6umkX7DYokD19UXUSjRn 4MqdI5Xj9W2tSnlTzT6QKaDSBLs4Ey3QxGtDgNI8rd2Xk33Js8/at4W4bS5b2mhQ O87Pyvfzq0DcJMm4fmu3jkdzPvoSkDgQ8+ifHP+KCtlqtPg1mGRxl/XGBxgn7WZS qjWmmeDaqipXJxQnwwI0PMW+pvAd3UExf8gf+v2c4cNZg52wPkKRmwTufXDvk3jE JgkNM4rx/2x3i9MoyoelPe7Dv4tqlRskz6IjFehWaudCh4FugtKZGynzu42Tc69G kFPzMgSkHhV1uAFghwaLpfSdElIzS7h3VB7ZT4nbTck82fX3X3Ac1A+PgAMm8x0P jIch77IxmzZgMler8/Czc+685Qcevb+Z04teFOSUPmmon9aaCRQyDmYBUQr56ywh hy114D+JSNuXx5c0ev/wnYgka13QZdgjUS7b688WYdLM7UXNIuajEY3zj17qljb1 1d84aIVaVXrMTHbvKNMuHZ5AQCCkEUNcT/44t2nMC3NyrI1StSnaGmSEoM26Uggo ErEM2ihklX4sUm6pgXWfjgR1PQi0JDIE2ZZ9KrLDYVoG5T1VNgQ= =i21h -----END PGP SIGNATURE-----