-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 19 May 2026 18:28:20 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 148.0.7778.178-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (148.0.7778.178-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-9111: Use after free in WebRTC. Reported by Google. - CVE-2026-9110: Inappropriate implementation in UI. Reported by Google. - CVE-2026-9112: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9113: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9114: Use after free in QUIC. Reported by Google. - CVE-2026-9115: Insufficient policy enforcement in Service Worker. Reported by Google. - CVE-2026-9116: Insufficient policy enforcement in ServiceWorker. Reported by Google. - CVE-2026-9117: Type Confusion in GFX. Reported by Google. - CVE-2026-9118: Use after free in XR. Reported by Google. - CVE-2026-9119: Heap buffer overflow in WebRTC. Reported by Google. - CVE-2026-9120: Use after free in WebRTC. Reported by Google. - CVE-2026-9126: Use after free in DOM. Reported by Google. - CVE-2026-9121: Out of bounds read in GPU. Reported by David Korczynski (Adalogics) . - CVE-2026-9122: Out of bounds read in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-9123: Heap buffer overflow in Chromecast. Reported by Google. - CVE-2026-9124: Insufficient validation of untrusted input in Input. Reported by Google. Checksums-Sha1: 8e04d54bc03e93775a438b91d6d84b39d30c0589 5518744 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 28b747ad7ccac65b668a377ec609a2d95d775f41 25729424 chromium-common_148.0.7778.178-1~deb12u1_amd64.deb c3f65c3ebf3ad07eb5e923906f45d0b578486d1e 35894604 chromium-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 41ef3fb05441f519be2b61b29df53818821396bd 7578512 chromium-driver_148.0.7778.178-1~deb12u1_amd64.deb 19dea06a996ca4b854b3e3b24f543377d43629c8 29582028 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 4838c7d2ed98b0f5309dc9c111fc46b56e1c7cd2 57624936 chromium-headless-shell_148.0.7778.178-1~deb12u1_amd64.deb c53cb334eb8aa0ce5a7446b9717de0bf9bfdc128 19288 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb e6e9935d925fa25ac918c371dd61b02e1554597f 120128 chromium-sandbox_148.0.7778.178-1~deb12u1_amd64.deb 0efb7df3a280061cbca160cb52c7b69c7af07dfd 32436040 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb a97de94b4d65cb6487318caaf4c494b81db8d11b 63121096 chromium-shell_148.0.7778.178-1~deb12u1_amd64.deb ab6e22b906455a5db9bd3b968ed209aebb0ce80b 30472 chromium_148.0.7778.178-1~deb12u1_amd64-buildd.buildinfo aacb0a3c94c276955ddcc1dafd8dafe622679299 75068212 chromium_148.0.7778.178-1~deb12u1_amd64.deb Checksums-Sha256: 7231236972b025387042c10b6c13a0b3a2d958ebb488342df92467483b403c7b 5518744 chromium-common-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 09d4988f935993a9f0cd2de656dc8b022a8cafc16a14eb1cd199556ff1eb61ba 25729424 chromium-common_148.0.7778.178-1~deb12u1_amd64.deb bb4bdecf130ddc95f4164b1c2725b70bcbd3be479725751a4584894ec76dc94c 35894604 chromium-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 408b8ff0072da095f3861ab8715876fbdab39739e79049ebc7b99f2dcefeabb5 7578512 chromium-driver_148.0.7778.178-1~deb12u1_amd64.deb 90b41e830b8e30c7822fb082ff407683de71aaa8d3843681419e9a2cfbe81623 29582028 chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 1b2f2adeaeb2e68f65619ed4db0935400f42a47ad47c6c0dc4bc9e589da41fa9 57624936 chromium-headless-shell_148.0.7778.178-1~deb12u1_amd64.deb 6c20c898e3b51b08570012259a977d7daa692fdaadb47727260acc9e3824450b 19288 chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 347fc33bc1fd74871ce0f565d5d0a57022c0235bb9b2ce2ecaa15a4b5df52353 120128 chromium-sandbox_148.0.7778.178-1~deb12u1_amd64.deb 12964f77e6aed1ca3f9ad8feb9393fb5312102db46baf8060c2d083ab7ae35b9 32436040 chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb ba0946c32e61cc05cf756f49488a27b3e35389809b3923f20242afa14d7315c3 63121096 chromium-shell_148.0.7778.178-1~deb12u1_amd64.deb ddf6e595ae752bf1e674cda40b1aa055306010db9e5a67e10bd5d07359187658 30472 chromium_148.0.7778.178-1~deb12u1_amd64-buildd.buildinfo 6203bce632992148ab61c20d8352d8bcbd9ca9519bccf2d627d903e455fcd5a2 75068212 chromium_148.0.7778.178-1~deb12u1_amd64.deb Files: 289f62431164575f30ed60d1f66fc756 5518744 debug optional chromium-common-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb be652b696887675302f4027a150b19c7 25729424 web optional chromium-common_148.0.7778.178-1~deb12u1_amd64.deb 2527bf47157ef2879a58ec30af2f9ccb 35894604 debug optional chromium-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb e4d7f89f66b4f944acaa838f5e71d1c3 7578512 web optional chromium-driver_148.0.7778.178-1~deb12u1_amd64.deb 4e5bfb012313249f0492d49028daed22 29582028 debug optional chromium-headless-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 1dbbc274489b51a49eca495e081063fd 57624936 web optional chromium-headless-shell_148.0.7778.178-1~deb12u1_amd64.deb c23d2413c8471bfd72012a139f6a59e0 19288 debug optional chromium-sandbox-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 931a22472fbae419c8ff85d35e93bdff 120128 web optional chromium-sandbox_148.0.7778.178-1~deb12u1_amd64.deb 8474136fbf93b25304ab366a157c5d86 32436040 debug optional chromium-shell-dbgsym_148.0.7778.178-1~deb12u1_amd64.deb 4104373434ce337e5f4b412a5d3c8dbf 63121096 web optional chromium-shell_148.0.7778.178-1~deb12u1_amd64.deb 80447f8fbffe0fc81afefdb60f393dd9 30472 web optional chromium_148.0.7778.178-1~deb12u1_amd64-buildd.buildinfo e42e11e8d3ad5f8c180835aa4ca105ff 75068212 web optional chromium_148.0.7778.178-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmoO6dYACgkQYg9P9sm2 dfEcgA/8DAW9JlfH5ViDj2przE2cnDz/tDEw3HaZqFd+O0HJCIOFC+yw1QcECKbl al5rKLH/HRwbKPGNXjCl2SIeou7w0fkAgiLOPMR946khmAf14EGRRvNcEhNi1S4d Ea51B1KSj78MliQn9Dqh0oZRmLlyj+qbuGkdsqGYPrX2bQLgNnohraZ2bHhvDyrC 1L2ZBG0HlThmSbS3uhSGbtHS9lz5X5pfsIJJeIXOLH4JCTVaumzibLjxG4rJFOnu AlwL0eQzcHbCZ0fi8xxpIbm99/QTXw6ANO3M2LhQfigE/7mp9DNtBPk1avp+ahZ2 dEJJMu6aoO+TzWQ6pYIwXY+YQ45oQrVNmLrrkx2Le88AoNhnFff5jXkUawHh3FJ9 JxS/MW1I16HmeJaR1/U+Y2/jvga0c0tStXxA8daACuo9hnowIXRv8d62zdWf3dYK QY4KdnsRfkAnF2+TyeGBDE4EReKbhKY/dvrbFdEdmYmnP5lvV+K49lKqr0qRt+pa CbzoRH+anvi6cuc7+2WjinWGQShlBjgkXM7Ep3Ks1qiqBRxrBzQLQs0FYxtPy0O6 fOlmG7GkbBsX5wLiimWdUpDQfRspEQtytWsGKv/+iqAb0JCzPwJ4RbFSWp/xiyXO dRfAXUGfRNe6bmQ25THNpbKJbK1UkkHEGwySocsxOwLUH8/RdJU= =XZCn -----END PGP SIGNATURE-----