Accepted chromium 150.0.7871.124-1~deb13u1 (source) into proposed-updates

Debian FTP Masters <[email protected]> Fri, 17 Jul 2026 10:02:41 +0000
Newsgroups gmane.linux.debian.devel.changes.stable
Message-ID <[email protected]>
--===============5361711904321277399==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 14 Jul 2026 23:16:33 -0400
Source: chromium
Architecture: source
Version: 150.0.7871.124-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <[email protected]>
Changed-By: Andres Salomon <[email protected]>
Changes:
 chromium (150.0.7871.124-1~deb13u1) trixie-security; urgency=3Dhigh
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-15764: Use after free in Ozone. Reported by Google.
     - CVE-2026-15765: Use after free in Ozone. Reported by Google.
     - CVE-2026-15766: Uninitialized Use in Skia. Reported by Google.
     - CVE-2026-15767: Heap buffer overflow in libyuv. Reported by Google.
     - CVE-2026-15768: Insufficient policy enforcement in HTML-in-Canvas.
       Reported by Google.
     - CVE-2026-15769: Insufficient validation of untrusted input in
       Linux Toolkit Theming. Reported by Google.
     - CVE-2026-15770: Uninitialized Use in V8. Reported by Google.
     - CVE-2026-15771: Insufficient validation of untrusted input in Media.
       Reported by Google.
     - CVE-2026-15772: Use after free in GPU. Reported by Google.
     - CVE-2026-15773: Use after free in Core.
       Reported by xinchaotian of Microsoft.
     - CVE-2026-15774: Use after free in Skia. Reported by Google.
     - CVE-2026-15775: Insufficient policy enforcement in V8.
       Reported by [email protected].
     - CVE-2026-15776: Type Confusion in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-15777: Use after free in UI. Reported by Google.
     - CVE-2026-15778: Insufficient validation of untrusted input in
       Navigation. Reported by Google.
   * d/patches/upstream/libyuv-loongarch-fix-row_lsx.cc-and-row_lasx.cc.patch:
     drop, merged upstream.
Checksums-Sha1:
 437de3381c8e4d0ceef2dd924d4063a825af866f 4099 chromium_150.0.7871.124-1~deb1=
3u1.dsc
 b4fbd12de7df3afe3e8369f4497a4af6b478837d 941311420 chromium_150.0.7871.124.o=
rig.tar.xz
 4a3db24b1e6d178a1c00bd8ef2f9562c56d2790c 536788 chromium_150.0.7871.124-1~de=
b13u1.debian.tar.xz
 3ad3b6c918b6c20c0fc8111df0964177e723c436 27274 chromium_150.0.7871.124-1~deb=
13u1_source.buildinfo
Checksums-Sha256:
 235e810fbbfc073b882d38212537c9da57ce71b11e9257e8a5aab8ce0c24722d 4099 chromi=
um_150.0.7871.124-1~deb13u1.dsc
 50f06f405618eda4a1d8b7399ad45985cab4eabf2ee9b5adeb80c0397ceb92c1 941311420 c=
hromium_150.0.7871.124.orig.tar.xz
 cb50051dbffed8c67969a781fb6d3ab31fa78fb026521cb402b66a3fba4b837a 536788 chro=
mium_150.0.7871.124-1~deb13u1.debian.tar.xz
 2f6aa30a8b9bd7c6f3c412ad41c702c40bc1e75882e8a07844073e09ca2d5132 27274 chrom=
ium_150.0.7871.124-1~deb13u1_source.buildinfo
Files:
 c3c968b4cae2dad14c07bc2138bfe08c 4099 web optional chromium_150.0.7871.124-1=
~deb13u1.dsc
 aca404ee4f0888c74efeb1e62c60bfc4 941311420 web optional chromium_150.0.7871.=
124.orig.tar.xz
 6ef0051e2812db8c8a6e7e0e4abd4b2a 536788 web optional chromium_150.0.7871.124=
-1~deb13u1.debian.tar.xz
 88ee07c618dd033b37510017dda6d292 27274 web optional chromium_150.0.7871.124-=
1~deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmpXTkQUHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8NudjcjRw/8DcBwyPTLz+NkBndBEms2pzwZV+Ut
DT2yckJJRRWI7WxtSpDbztE0sFsO9nnXoqSLFMmMToGDgh0yWmlGD+gOZm6K0VXJ
bPQIXzeSJsolHEoSP/9e8DNhKuNYRJkAZkVfwgO/F8akRG42CNpiEfQmPcAIPXzb
jDlFEAv0/IEaBgTV+TgQPrn6Cvv93CXxUfRn8mIUKfi8oLuLAzgnUM2kakrjTDnt
h2mM7ZpLRRAbag1GfYInlhkdkfXMvBcxoyaqQG6RSUDYReysS/G1aeDwiTMuzpFP
HevTXo7wt5H+GB9e7zL3yJfGveMGyUoxkRP8dbw15Byk8kS/QQcaYSVGYtmXTp8D
M0Bq1k5bjBYR9D/zPGwQRIT9MHX/J7svm3TQDIMXTYHuhvjclkUq5MdaOIcvGHWk
ethoaYZS47k/w8/AFog1oLxurob0qdzhOhLmL+qhkgzZjogK/9ct12agfKCaYJHy
lMm9BFRNki5+vy4yES3y+Et45pfQAbKGcntla4GuHEwCiPl0AEQbd/6NCEuOmBZ/
U5wXLiBIJ0wA1AB3RvBtivbTEZRhGdDwN/SWDX0HN5dxXHY8RVIGtzOriVoHZ9AR
QOhBgqj4ktcMrXyzxdSWPZF9+VbB4fI6Xu+B/8oHRIKDECE/TjhjqnYFHhPr7mVn
rF/QzR2lj1I4ETY=3D
=3DZ6gN
-----END PGP SIGNATURE-----


--===============5361711904321277399==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaln9wQAKCRCb9qggYcy5
IdQIAP409fQTmWh0sG8nBIY2ZxmB/oSyoYP2AepD9x+a1isulwEA55GstOadkUo2
Impt5FiOj2ZwqP0C88NBYuNEB9Ieiww=
=aJh+
-----END PGP SIGNATURE-----

--===============5361711904321277399==--