-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Nov 2026 22:51:42 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 156.0.8078.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1150706 Changes: chromium (156.0.8078.79-1~deb13u1) trixie-security; urgency=high . [ Juan Manuel Méndez Rey ] * d/patches/upstream: new directory for fixes that are already upstream, with the two a component build needs. * d/rules: set use_mold=false and dcheck_always_on=false, which a component build needs because both default back on when is_official_build is off. * d/rules: turn off use_thin_lto in a component build. Thin lto adds -fwhole-program-vtables, which a component build makes unsound, and the browser then crashes in mojo at startup. * d/rules: keep dh_makeshlibs out of /usr/lib/chromium. That directory is private, and chromium-common was declaring libvulkan in its shlibs and activating an ldconfig trigger for it. * d/rules: add the component build configuration, off by default. Name an architecture in COMPONENT_BUILD_ARCHS to turn it on there. * d/rules: build chromium as a component build on armhf, the only configuration whose final link fits in a 32-bit address space. (Closes: #1150706) * d/README.armhf: new, why armhf is built this way and what to check on a version bump. . [ Andres Salomon ] * New upstream security release. - CVE-2026-76024: Memory corruption in MediaStream. Reported by Xinyang Ge. - CVE-2026-76025: Use after free in FileSystem. Reported by Google. - CVE-2026-76026: Memory corruption in Autofill. Reported by Google. - CVE-2026-76027: Memory corruption in CacheStorage. Reported by Google. - CVE-2026-76028: Use after free in FileSystem. Reported by Google. - CVE-2026-76029: Memory corruption in Network. Reported by Cristian Di Nicola (crih.exe) (https://crihexe.com). - CVE-2026-76030: Memory corruption in FileSystem. Reported by huntersnot4. - CVE-2026-76031: Use after free in Input. Reported by Arni Hardarson (Neonix Security). - CVE-2026-119260: Use after free in Frames. Reported by Google. - CVE-2026-119261: Improper input validation in Skia. Reported by Google. - CVE-2026-119262: Improper input validation in V8. Reported by Hyeonjun Ahn (@_deayzl). - CVE-2026-119263: Memory corruption in GarbageCollection. Reported by Xinyang Ge. - CVE-2026-119264: Memory corruption in Dawn. Reported by leegn4a. - CVE-2026-119265: Memory corruption in Quota. Reported by Google. - CVE-2026-119266: Use after free in Quota. Reported by Google. - CVE-2026-119267: Memory corruption in DOM. Reported by Xinyang Ge. - CVE-2026-119268: Integer overflow in Editing. Reported by Xinyang Ge. - CVE-2026-119269: Use after free in Blink. Reported by Google. - CVE-2026-119270: Improper input validation in CacheStorage. Reported by Google. - CVE-2026-119271: Use after free in Skia. Reported by Google. - CVE-2026-119272: Out of bounds read in FileSystem. Reported by Google. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Rework script to be called directly by ninja, instead of being called by various upstream build scripts. * d/patches: - debianization/pre-gen.patch: stop patching various upstream scripts (eg, run_bindgen.py). - disable/node-ts.patch: drop, no longer needed with above rework. Checksums-Sha1: 2b07f1f1352bc1f81a4dc3961a27ca4313aca62b 4194640 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb fc83543b5fd7f59a9a0c78eb580ef14dde63a516 31731400 chromium-common_156.0.8078.79-1~deb13u1_amd64.deb 34da3e1dcbfffffab57bbe5d2a77744a0cc456b4 34356848 chromium-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 2b835b9629b6be6187ba74a3c3f9d6de1a26fb5d 8474992 chromium-driver_156.0.8078.79-1~deb13u1_amd64.deb 702d7cb21f9b80fe93b7205a284116ad26172d36 29275828 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb bec7550348086b4ab17e7c06b5e2b3ba24f55f85 69320980 chromium-headless-shell_156.0.8078.79-1~deb13u1_amd64.deb e2cc8c395c62b8d1bcb919ee0a7fe5560d11efa3 20356 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb c9dc5ca81b1a259e2f341b6e113dbdc130e1bd79 161728 chromium-sandbox_156.0.8078.79-1~deb13u1_amd64.deb 9317e723300fe42fef0abe754338b7621129b1b0 30413736 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb cefe533080b9107bb3850a6cbc92cc98d217e2ea 67033872 chromium-shell_156.0.8078.79-1~deb13u1_amd64.deb dcd4fa5811d9c647b774cc5d37207895338aa4de 31481 chromium_156.0.8078.79-1~deb13u1_amd64-buildd.buildinfo 6fc4ba0986222234d464dab6b0a222f9b13027ac 91684936 chromium_156.0.8078.79-1~deb13u1_amd64.deb Checksums-Sha256: 12190532f08e662eb73b15a09b85c94765121f05593c628c0ec686d7ecc2dde6 4194640 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 29d9a33123bcc5aba47746eb89a72d973bf7a737e3820425c7496904f7235fbd 31731400 chromium-common_156.0.8078.79-1~deb13u1_amd64.deb eed4c367aee73cf7120aa81425c4a87fed33dd54b8314897effeb114ad3a971f 34356848 chromium-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 4230d073eace82559cab94db62f8b61679a23acfb1016e982b992a94351cd22d 8474992 chromium-driver_156.0.8078.79-1~deb13u1_amd64.deb e12f716dcf46e1460a7979087c492baf5cee5658e0088ac736ee5159dd4bbdad 29275828 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 3effad373d85df1bb998bb88a5768aa3b8cf715a2e0e7a4723d384240169aa80 69320980 chromium-headless-shell_156.0.8078.79-1~deb13u1_amd64.deb b72c3bdb9ee92e3f28abd3e92914eac2c33451c549381c2087083948aea2e647 20356 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 5a265f12abaefe0c700ab6b4e5956b7e1b8f713720aaa253d7a3319631969898 161728 chromium-sandbox_156.0.8078.79-1~deb13u1_amd64.deb 9de4ecfdd09f67bc321b444cdd26ffe1797a828bb8e910d70de3232e25dea0f3 30413736 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb d1e4af7c644d95bf24f70ef96a9f39c735499f98add4663e970c0bd2a2df0e12 67033872 chromium-shell_156.0.8078.79-1~deb13u1_amd64.deb 85bc14f7da6a006b8b946be6c05360dd2597c9d0ceea584b70f504f284748fb3 31481 chromium_156.0.8078.79-1~deb13u1_amd64-buildd.buildinfo 9325777fb842eafa3f992209ee6f1b69bad76c3311a88efd4d7772cec22e3795 91684936 chromium_156.0.8078.79-1~deb13u1_amd64.deb Files: bdffdf01be91c65f492c76a9664c25bb 4194640 debug optional chromium-common-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb f9264ff5232a377fccc3b4a225d22047 31731400 web optional chromium-common_156.0.8078.79-1~deb13u1_amd64.deb c647e223dd82b26d14696fcb253e8227 34356848 debug optional chromium-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 01fdd5a24d57ab43e5fb279be1a180fd 8474992 web optional chromium-driver_156.0.8078.79-1~deb13u1_amd64.deb 215988f9b39b89c730c409258eb01af5 29275828 debug optional chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb d598fce100a1e806f0a10d148e3891d1 69320980 web optional chromium-headless-shell_156.0.8078.79-1~deb13u1_amd64.deb 4d6e29ec36bcf4443ba892b43b235b3c 20356 debug optional chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb 27b66617350bcf15fee7ce61239d8aac 161728 web optional chromium-sandbox_156.0.8078.79-1~deb13u1_amd64.deb 9792d19147c4a67dfeea9e868b0ba8d4 30413736 debug optional chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_amd64.deb aede950022db58b11703af9a53b12ee1 67033872 web optional chromium-shell_156.0.8078.79-1~deb13u1_amd64.deb adc5d3ff4eeede8a7fd79e2afcacc214 31481 web optional chromium_156.0.8078.79-1~deb13u1_amd64-buildd.buildinfo cf45e58d45a5b655395cf921f71983d5 91684936 web optional chromium_156.0.8078.79-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmtr4KUMaso2EQ6NrTwt/65ON6zcFAmrpBG0ACgkQTwt/65ON 6zdSKg/9FyhrWS2Fjf+BcSEvrB6nwOSNkzUsKhOJg747keRLBndz51PSMR4EwqRQ rO1I4DX55o1aiVExaUW+/SKyaLLugktnmFfD3Wb6C9mlYzJszyadO+ujLQamqD3P Ndee1znpbTZJqvLPPc2igHGLuXRdbRt2tprWt+ZPGkxavSL755w4SQ+kHJgBoAuz BpWWkDFVyGuh1u+SXiqt6Zp/EVabYVuZRMsk+77JAYYo7FbNbjQqT1XNEbDw3Os4 n+RGxRqLn6r5jNZU9wV1nVqzUmN+HNlNTN0hyXxtsUlhVTGuc8b2A1DpdWAq86WF nOrg1w9J2zTAo0Zct1B/O5THuYwLLdxnvmurEYP+vQSKoB1BBizeBq7uFwW0jEH9 BizkxaPuBCqdp/sdLRkU+KNmuC4xsotLRHE7YcvC1jdQb4oOdE3pfhtY+U1VoKy6 rrnPGcy+c8CeFturFZJONqLrXi4kR3uAI4OhYmgPnIRp0+0J60tG/EsX6cfos2g0 thvIouZbuq2go1cSytw+iaRFcFHWEgGhIhJ64ehZsZJGikZ3N20ymX4HbDV+fpP8 Jh4Q/ibRcTvgqi13CfE7yv8OU21lJh3IS9H/7wywl4dcI8bsYQtfmb/YCwlslyaJ rCxrOpBvA6uUjWmZ5st2J3aKUSH6ZAfVipVBr2Ahy49NOVsn0LM= =SM52 -----END PGP SIGNATURE-----