-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Nov 2026 22:51:42 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 156.0.8078.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1150706 Changes: chromium (156.0.8078.79-1~deb13u1) trixie-security; urgency=high . [ Juan Manuel Méndez Rey ] * d/patches/upstream: new directory for fixes that are already upstream, with the two a component build needs. * d/rules: set use_mold=false and dcheck_always_on=false, which a component build needs because both default back on when is_official_build is off. * d/rules: turn off use_thin_lto in a component build. Thin lto adds -fwhole-program-vtables, which a component build makes unsound, and the browser then crashes in mojo at startup. * d/rules: keep dh_makeshlibs out of /usr/lib/chromium. That directory is private, and chromium-common was declaring libvulkan in its shlibs and activating an ldconfig trigger for it. * d/rules: add the component build configuration, off by default. Name an architecture in COMPONENT_BUILD_ARCHS to turn it on there. * d/rules: build chromium as a component build on armhf, the only configuration whose final link fits in a 32-bit address space. (Closes: #1150706) * d/README.armhf: new, why armhf is built this way and what to check on a version bump. . [ Andres Salomon ] * New upstream security release. - CVE-2026-76024: Memory corruption in MediaStream. Reported by Xinyang Ge. - CVE-2026-76025: Use after free in FileSystem. Reported by Google. - CVE-2026-76026: Memory corruption in Autofill. Reported by Google. - CVE-2026-76027: Memory corruption in CacheStorage. Reported by Google. - CVE-2026-76028: Use after free in FileSystem. Reported by Google. - CVE-2026-76029: Memory corruption in Network. Reported by Cristian Di Nicola (crih.exe) (https://crihexe.com). - CVE-2026-76030: Memory corruption in FileSystem. Reported by huntersnot4. - CVE-2026-76031: Use after free in Input. Reported by Arni Hardarson (Neonix Security). - CVE-2026-119260: Use after free in Frames. Reported by Google. - CVE-2026-119261: Improper input validation in Skia. Reported by Google. - CVE-2026-119262: Improper input validation in V8. Reported by Hyeonjun Ahn (@_deayzl). - CVE-2026-119263: Memory corruption in GarbageCollection. Reported by Xinyang Ge. - CVE-2026-119264: Memory corruption in Dawn. Reported by leegn4a. - CVE-2026-119265: Memory corruption in Quota. Reported by Google. - CVE-2026-119266: Use after free in Quota. Reported by Google. - CVE-2026-119267: Memory corruption in DOM. Reported by Xinyang Ge. - CVE-2026-119268: Integer overflow in Editing. Reported by Xinyang Ge. - CVE-2026-119269: Use after free in Blink. Reported by Google. - CVE-2026-119270: Improper input validation in CacheStorage. Reported by Google. - CVE-2026-119271: Use after free in Skia. Reported by Google. - CVE-2026-119272: Out of bounds read in FileSystem. Reported by Google. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Rework script to be called directly by ninja, instead of being called by various upstream build scripts. * d/patches: - debianization/pre-gen.patch: stop patching various upstream scripts (eg, run_bindgen.py). - disable/node-ts.patch: drop, no longer needed with above rework. Checksums-Sha1: 3ffdee5fe4df112b75244b2fe237f397daecb8ee 4165488 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_i386.deb d8a201756b9dc5fd277a326eded8c351729219c0 31833804 chromium-common_156.0.8078.79-1~deb13u1_i386.deb 9502f0527667712c3fc6901103ad6183344c374a 37402416 chromium-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 89ef26806f53d37bc282f13e7ef1a52ec495af79 8822248 chromium-driver_156.0.8078.79-1~deb13u1_i386.deb 80f27f67a72c0951cc3f5c6a9d91b7b5bcd7be13 31027500 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 8a7c5375fddd7f109e5bb6cd0b6e091e3e5210c0 65105648 chromium-headless-shell_156.0.8078.79-1~deb13u1_i386.deb e60200f5180cd067a815f4ef7adcb8f49605bb8b 19372 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 66b6f410dbe678f0a8ab69177a184228c168d5bd 162392 chromium-sandbox_156.0.8078.79-1~deb13u1_i386.deb 1aef92a0a54decce5f82ea2e99aba3f742675b6d 33418424 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb f60b8debb80fef60b60b0d993036e3a7af590f93 69660520 chromium-shell_156.0.8078.79-1~deb13u1_i386.deb a7689faa1d1fad93a86319b9d93a054b34c014f1 31403 chromium_156.0.8078.79-1~deb13u1_i386-buildd.buildinfo 03fe9f61f04ce28e75cb62d516218a7b41db632f 83293544 chromium_156.0.8078.79-1~deb13u1_i386.deb Checksums-Sha256: 3d03bd0eb14342f361ea14ede65db1c3a54aa6d5de74920ae29d53b1c2a34a84 4165488 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_i386.deb dd4e243820ed8492a653d26102ca0a78b720c280b02a173d153a0fe31f9b0e97 31833804 chromium-common_156.0.8078.79-1~deb13u1_i386.deb 0919562f812c694592d6db80cd2587aeb3c5b93b5e6711979ddab7bfd9335f22 37402416 chromium-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 723e9df45288c21503437fecb3257096df9103ba69100f5092603340c654bd27 8822248 chromium-driver_156.0.8078.79-1~deb13u1_i386.deb 8a32971ef642e08794bc4b85d1fb2c77908b8b98e9dbafdd38aedcc57810ddd4 31027500 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb bf865e0094c547fa938aadcb4f8c25f46c785feb90acc6aed1bd3c48116c90b7 65105648 chromium-headless-shell_156.0.8078.79-1~deb13u1_i386.deb cf1fddf876ea2b4ce30cc5ac4cf8d1049a15245e9ea3ab22e7c20ad129d69372 19372 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 8ebec7157416779fe14d0dc11cb6d3c4cb9ead2b78b0f65ed224a498127b8ba3 162392 chromium-sandbox_156.0.8078.79-1~deb13u1_i386.deb b5a770c4eba0208c6a6782bf0b220ecab5c991b36beaffe00193aae43b81cb70 33418424 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb f4e510129fd94c20c517d943f095fb6919685e85711141b70e86b098dd1e9358 69660520 chromium-shell_156.0.8078.79-1~deb13u1_i386.deb 5c511358d38fb5bb0488496db6248dfc1f56e30019ab1e7c77f9519d22649b91 31403 chromium_156.0.8078.79-1~deb13u1_i386-buildd.buildinfo 2172d60d1a44ff747e1a5d811e404e8e5b1458bb1cc2f638d40dd2d022b3fe66 83293544 chromium_156.0.8078.79-1~deb13u1_i386.deb Files: 87e8648a22504125663980fba244eb6c 4165488 debug optional chromium-common-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 38bdefb7c70392ec11699fde063120e0 31833804 web optional chromium-common_156.0.8078.79-1~deb13u1_i386.deb da30509440d6ef7d54539334bc3e5a76 37402416 debug optional chromium-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 5db1793205ccdf3608f8e43bac8edb74 8822248 web optional chromium-driver_156.0.8078.79-1~deb13u1_i386.deb 69bc2f6b4822a9f541961ae28f602d13 31027500 debug optional chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 3aa4dbb1f979efe3294347439d0eb0b7 65105648 web optional chromium-headless-shell_156.0.8078.79-1~deb13u1_i386.deb 477a9d3702da44997322f2f204910cde 19372 debug optional chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_i386.deb e93a69434347810457dfdc33553e3b20 162392 web optional chromium-sandbox_156.0.8078.79-1~deb13u1_i386.deb 7006c030902ed303438f52ec5d1c04b8 33418424 debug optional chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_i386.deb 0d0c4fc68c61c8c1b7944b622dc10dc2 69660520 web optional chromium-shell_156.0.8078.79-1~deb13u1_i386.deb b6bdf3eabae394965a5061ff3511a467 31403 web optional chromium_156.0.8078.79-1~deb13u1_i386-buildd.buildinfo b13a6c13aaff2353c72727d6ba7a0bf5 83293544 web optional chromium_156.0.8078.79-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmrpLXYACgkQbheoBegw XLLiFA/+JSr5QE66Bgs9Ol40+a+ScRJEDyNranh6MTVFWRoh5FVEAfEs86X+Hfqn 3CaJ/D5PBEfkaA86zvywKNRE4aZMS/lKbyeaiT5CSbXqcYF2TTLV8UHtefWLalF1 b6f3dyysgP0G0dJDww8tMUS0PUT6U6zHwjB55Zz5xuwEELJBuhOqY7BNmGXHaKYp 0oYDXCX3f0zIf6+o7EnK6/q9GFkSaNZgRuOsaX+zy9q0ea4g7P4A7mCSzM++kFTh Kto0tutyINyOBI/c92nTAxRHdWJ4ND+2Q3r6DGZGHSiVvWyCNFxVVA5x4KexAytD dLJoeUtYl23i0HoU47VcNbGwXE9rWPOHrhc4vs1nvE8THDIfF42QeD+2LATYRrBR rHXQyASeT26NVUN8VkyRspslwbbQIXu3cy2Dp/m7C+tH2c1RyXxIUbbaXOpAkBOq cj67ZEr7YRT6NtmHUXU4+v3TqkhWWlHDgUbX2T8S5MVcBIbX8hBMCFn75liZGcwx AP7AVx9thhDCUT5CaniLlW+e7xTrh8P5QzvRdjjvbD0YiUoVx1uWE3CXA45PdMcb onO0YrLuML0cJOG1EUrNtosXGV6aHWLwtJQaeEmWviqG/rXSIbacHWXZA8Y0lh0W Jm5d+TFuL4owF28J1plbRswK3p7cEQPVaMk1JsfpMi0O4vB3rk8= =+klw -----END PGP SIGNATURE-----