-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 148.0.7778.178-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: af61e3fdf541d4a0a49ad887d7b839aafe8c2de3 5308424 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 39498f2d6740ee8068fdc595ecd2c492ac08bac4 25731652 chromium-common_148.0.7778.178-1~deb12u1_i386.deb 0207e2ab97a90a58f1cfa07e7a3d107857392fec 36121200 chromium-dbgsym_148.0.7778.178-1~deb12u1_i386.deb f3110d5407e35c2713d9ed418b2d90e1d723bf5c 7934512 chromium-driver_148.0.7778.178-1~deb12u1_i386.deb bfb1346590c228f7929609ce3002684b6562af1f 29774584 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb c333943a1815291628b36b7a8225ec32c180a8e2 59250164 chromium-headless-shell_148.0.7778.178-1~deb12u1_i386.deb 7be4be2f31967a587cd5a368dceb8197df73e049 17824 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 3a016384dcad2a735db351b3cc6221108eba2b63 120032 chromium-sandbox_148.0.7778.178-1~deb12u1_i386.deb f5634d3fe5857755c65c9f2225445f0e6403cd34 32603932 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 22d8791d41ee684b600e02d0626607c09ce0974a 64920468 chromium-shell_148.0.7778.178-1~deb12u1_i386.deb 6c536ec3ab14c9fdfb304b888d83a106e832cab8 30470 chromium_148.0.7778.178-1~deb12u1_i386-buildd.buildinfo 7302061ad884343c788cd3018d6f9c2f2d3689ca 77590832 chromium_148.0.7778.178-1~deb12u1_i386.deb Checksums-Sha256: 025df66d1ca666f41755b95207c13c78933c287bdde2f468a852dc9945389ab5 5308424 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_i386.deb b7740ce689e35643a8e226a91e5f46548bb916c95f0e8c5673b060cf80ceafef 25731652 chromium-common_148.0.7778.178-1~deb12u1_i386.deb 4eba5804f5a2517dab607098bfa1613a299d4212d65befe5aa316bd5f1b8ac0a 36121200 chromium-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 95582981fb20fc26d40bc30d3cab7ca5a118a50c583364445026e97bf751db5e 7934512 chromium-driver_148.0.7778.178-1~deb12u1_i386.deb a3085daa0531657a8f0418c8a91c9fb8d29da19b3c19588b08a41161bc3c576d 29774584 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb d4a20dbcf35a36bde2e1abdfee6bf0fa13304e72f540e5f28849d832fc9960d3 59250164 chromium-headless-shell_148.0.7778.178-1~deb12u1_i386.deb da9ddd29ae057bb2f96aa8f03b37e99db2e41628bc8dfd83ced0b84fbf6291c0 17824 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 9abf26d5b976b5e513031d80830d0c9ebaee442869e43d33f6908fa484076fd3 120032 chromium-sandbox_148.0.7778.178-1~deb12u1_i386.deb 2b2050e8f525cfbfb1672aa8958d3d3b08127d62143c425518850f0eed6d0873 32603932 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 836149db8adc3c9eef7f713bbaacc16d7982c64a31b0367fa2fd3efd9b180ed3 64920468 chromium-shell_148.0.7778.178-1~deb12u1_i386.deb 280cee7e883d01a82e80e55fb9b84f26065e824b6c930f2840c15bc42e7c432e 30470 chromium_148.0.7778.178-1~deb12u1_i386-buildd.buildinfo a2ccbb13cd6b973af8b646607e25f896b1df9f730ef59845e6feaa92e63895f5 77590832 chromium_148.0.7778.178-1~deb12u1_i386.deb Files: adbc58235b6230c443c65ce28baeacdb 5308424 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 8359139c823733ed8efefe48e5eb967f 25731652 web optional chromium-common_148.0.7778.178-1~deb12u1_i386.deb 89ee43d95a7adf90379790c8e1f844eb 36121200 debug optional chromium-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 5171c3a07a10c53aeee2fcf4db3ac537 7934512 web optional chromium-driver_148.0.7778.178-1~deb12u1_i386.deb 4a875c33dee8fd15fc0c274dc657d9a2 29774584 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 30e8088272a884d7e78e85b891686ee8 59250164 web optional chromium-headless-shell_148.0.7778.178-1~deb12u1_i386.deb 0c05364f59294b7ef0dc6d44c2c9290c 17824 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_i386.deb ac9eb70fb378dd872a917dd84545233b 120032 web optional chromium-sandbox_148.0.7778.178-1~deb12u1_i386.deb 3b76f407adf2c5fb9d2702596033bea9 32603932 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_i386.deb 6ac7eb736ce9d88e28be49ce6e3457f3 64920468 web optional chromium-shell_148.0.7778.178-1~deb12u1_i386.deb 0924f669b14c1ca10d0c9cd1e858b3c7 30470 web optional chromium_148.0.7778.178-1~deb12u1_i386-buildd.buildinfo 8d6e906dbfa4ddbff622415cb104a85e 77590832 web optional chromium_148.0.7778.178-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmoPB94ACgkQf2INRiCd aWJ3vw//c8lzHakRDnizAzD5zh+JcfmRuS41W8sYRvJHHKp+oJaBAWj3oM4BY56M F8SQxGLe6ZGy2KY7nWH53HcogQu7UpVEeZd7odt9jZ+xGEo/yHUcPwS94MKUT484 KjEmLfmr+PhJCWTl9t0v3TuRhZscT738ltPo7rEKUCh+gF79EoWvZEkt8B9xCifj nkklq3SbGyviBFB9cQtyCFrefsfbLqQ/i6kAAZ4QiHqpPHNDOg+FuUj9SWo7H4SU MGUqIICGZOVEz8TMRqMmO0zDfvhP2FChkHZWJmhqtJPvgqx48FSivX/jZjNw/59M boIhSPAAg76oL+Ufji+RuOVNJ4LEs+6YJWqROmT4Eff2eeV4pkdOx4bq9LLTmbin sU8wipMlzdt58tTd+g3BlBEgDtEZGG7IUT0LyXMCA3K2pBFfwuDl4oL5j2astiUD y8q3WMRP4GPqmWWLc8K0gWhxq+4GZ9AWNMocXZ9m1pDuatcGSUjqembWZUQpfrNP 0Bj5NsVAMIRozCh1Q6tmnzHX7ZsHSWfZaAzr9oZunpgoLVOBmL3PP1Nq9rYc4D55 P6f/Y/rIu6ybeqvfW84BPo0k7e3soU5cdghC+Ecsd8ieOX6Nx4xThQIki8Imv8s3 kxr0aB11FRXHU5wrBIK0UCxR2KDdY5UWC2nBsy4YGZFMH5fZNfs= =K5hW -----END PGP SIGNATURE-----