-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Nov 2026 22:51:42 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 156.0.8078.79-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1150706 Changes: chromium (156.0.8078.79-1~deb13u1) trixie-security; urgency=high . [ Juan Manuel Méndez Rey ] * d/patches/upstream: new directory for fixes that are already upstream, with the two a component build needs. * d/rules: set use_mold=false and dcheck_always_on=false, which a component build needs because both default back on when is_official_build is off. * d/rules: turn off use_thin_lto in a component build. Thin lto adds -fwhole-program-vtables, which a component build makes unsound, and the browser then crashes in mojo at startup. * d/rules: keep dh_makeshlibs out of /usr/lib/chromium. That directory is private, and chromium-common was declaring libvulkan in its shlibs and activating an ldconfig trigger for it. * d/rules: add the component build configuration, off by default. Name an architecture in COMPONENT_BUILD_ARCHS to turn it on there. * d/rules: build chromium as a component build on armhf, the only configuration whose final link fits in a 32-bit address space. (Closes: #1150706) * d/README.armhf: new, why armhf is built this way and what to check on a version bump. . [ Andres Salomon ] * New upstream security release. - CVE-2026-76024: Memory corruption in MediaStream. Reported by Xinyang Ge. - CVE-2026-76025: Use after free in FileSystem. Reported by Google. - CVE-2026-76026: Memory corruption in Autofill. Reported by Google. - CVE-2026-76027: Memory corruption in CacheStorage. Reported by Google. - CVE-2026-76028: Use after free in FileSystem. Reported by Google. - CVE-2026-76029: Memory corruption in Network. Reported by Cristian Di Nicola (crih.exe) (https://crihexe.com). - CVE-2026-76030: Memory corruption in FileSystem. Reported by huntersnot4. - CVE-2026-76031: Use after free in Input. Reported by Arni Hardarson (Neonix Security). - CVE-2026-119260: Use after free in Frames. Reported by Google. - CVE-2026-119261: Improper input validation in Skia. Reported by Google. - CVE-2026-119262: Improper input validation in V8. Reported by Hyeonjun Ahn (@_deayzl). - CVE-2026-119263: Memory corruption in GarbageCollection. Reported by Xinyang Ge. - CVE-2026-119264: Memory corruption in Dawn. Reported by leegn4a. - CVE-2026-119265: Memory corruption in Quota. Reported by Google. - CVE-2026-119266: Use after free in Quota. Reported by Google. - CVE-2026-119267: Memory corruption in DOM. Reported by Xinyang Ge. - CVE-2026-119268: Integer overflow in Editing. Reported by Xinyang Ge. - CVE-2026-119269: Use after free in Blink. Reported by Google. - CVE-2026-119270: Improper input validation in CacheStorage. Reported by Google. - CVE-2026-119271: Use after free in Skia. Reported by Google. - CVE-2026-119272: Out of bounds read in FileSystem. Reported by Google. . [ Daniel Richard G. ] * d/deb_pre_gen.py: Rework script to be called directly by ninja, instead of being called by various upstream build scripts. * d/patches: - debianization/pre-gen.patch: stop patching various upstream scripts (eg, run_bindgen.py). - disable/node-ts.patch: drop, no longer needed with above rework. Checksums-Sha1: 92db0ee747efc9811fdf027d11a4c636d79544d8 4754816 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 4a1e8b8fb9918833c817c43bdb3c29a32f34742a 37565312 chromium-common_156.0.8078.79-1~deb13u1_ppc64el.deb 6a02dd70c72ed644f7fa8226e1796cacc8b36961 31210348 chromium-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 7e8170631d367c988cc179f2c99954ab26e05ecc 8193448 chromium-driver_156.0.8078.79-1~deb13u1_ppc64el.deb b5a6754cb4d94f7f96c80bd3a42425577196d6c5 25832196 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 408b2ac08f66e6d7ffc4f8748b47677a706aece1 66518712 chromium-headless-shell_156.0.8078.79-1~deb13u1_ppc64el.deb c806f73a72423fbf37c2d5545d24ea34a2dd2b87 19876 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb cc223e11ba8c7c5dad5fbc1d63835905bfa7ed65 161932 chromium-sandbox_156.0.8078.79-1~deb13u1_ppc64el.deb 817be560d4a3b48ee6334b3c9903c23e95c0358d 26339020 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb addc9aba902286e85f910e2628ec95b800c93b15 64276940 chromium-shell_156.0.8078.79-1~deb13u1_ppc64el.deb bfdf41cdef1dbdf6066d857354fd5b87770f333b 31414 chromium_156.0.8078.79-1~deb13u1_ppc64el-buildd.buildinfo 74f9f3039a8c801cb2b7545f65254ea20ae85f07 88363640 chromium_156.0.8078.79-1~deb13u1_ppc64el.deb Checksums-Sha256: 6446272f3215c7fd3230ec2b0c520109481825fbc45550fbe007c562137f09a0 4754816 chromium-common-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb a9ad6b25272a3ee5d5ceff0013576d89a15641dce0b6a19ca92c7e827474fe8e 37565312 chromium-common_156.0.8078.79-1~deb13u1_ppc64el.deb b87fefeb84c625d20ce44ee59398464f22e3280cfffe5fddbb1f81acd3995d05 31210348 chromium-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 6ce89578e49ded1e3bb70dc21489cf22833978a19997260888b5466397907958 8193448 chromium-driver_156.0.8078.79-1~deb13u1_ppc64el.deb 8a3c71eee037397d74b655d1d5c17a659bf46c33bc46fa8d9006724164e87282 25832196 chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb b9a6e2b874f699d003375a75a16cbc8fc22de74be1fe0e67008884cafbc25b59 66518712 chromium-headless-shell_156.0.8078.79-1~deb13u1_ppc64el.deb af0836125e3b7c054985f33b433439a4379429dd6dc0e5c2577907d30808853d 19876 chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb ac2a98ff0abcbebf0b783267359d659e1ecbaab9ea82b8d9f945774e47832174 161932 chromium-sandbox_156.0.8078.79-1~deb13u1_ppc64el.deb 561e67241b1f923c810d1ac08ce2ab23c96ce155ea4e27430e4af925654d37ff 26339020 chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb a290955b85544fbd846c14e00aab6126f8fec8383f58bc188307d40c04a18327 64276940 chromium-shell_156.0.8078.79-1~deb13u1_ppc64el.deb 6c5a415bb746fe26589d6bb096039ffb542c1ab57d4ecd9d69f8995ceac7c82a 31414 chromium_156.0.8078.79-1~deb13u1_ppc64el-buildd.buildinfo a836031725b93a85e0faf7aacac2b20b0ea5c6f817a07603ad71f69c3c894c35 88363640 chromium_156.0.8078.79-1~deb13u1_ppc64el.deb Files: 3e095a50661a852356d9d4e0e5962b03 4754816 debug optional chromium-common-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb b24f98412dfe046726f94792446efb60 37565312 web optional chromium-common_156.0.8078.79-1~deb13u1_ppc64el.deb 65a38dd2a81dedb5ca6b43149b95100f 31210348 debug optional chromium-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb d7930527aba5dfecfff3947713a4650b 8193448 web optional chromium-driver_156.0.8078.79-1~deb13u1_ppc64el.deb 8a3e1ba400c3732e91257319ddb22398 25832196 debug optional chromium-headless-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 7d34ea0d1ace26ba68ada49c85a85af1 66518712 web optional chromium-headless-shell_156.0.8078.79-1~deb13u1_ppc64el.deb e449cd3c083ac9a4ee6c1fc707963925 19876 debug optional chromium-sandbox-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb e5c12f28e9aa1a369e5b9f7e870cd0cb 161932 web optional chromium-sandbox_156.0.8078.79-1~deb13u1_ppc64el.deb 320f352468e3948f99e14a94f83f4fe4 26339020 debug optional chromium-shell-dbgsym_156.0.8078.79-1~deb13u1_ppc64el.deb 315c0bc5a06d4631aed124f1a5b07d0d 64276940 web optional chromium-shell_156.0.8078.79-1~deb13u1_ppc64el.deb b78268d6441465b394d4f8f80a280525 31414 web optional chromium_156.0.8078.79-1~deb13u1_ppc64el-buildd.buildinfo 435af6ebaf14ab9f291283294dbd6110 88363640 web optional chromium_156.0.8078.79-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmrpNuYACgkQV8ucRsMT puPD+w//UcJ655zwiDJgWduBoNtaSD+e0+h/PhrjqDdaRGFDxzB7S7/4d1+m0pLz spDHiejVhArh26ZRcx6rknQuy7f7QNIweCGSx/gIxA3Go6A/bOLRtEfHE7zCNjzW D9BGhce2eiykrIqJX8+CCezCwiw21Y3VcY6aEc2BBBG4CEngN5LsmTxpzlBbHHCN S5u+R1SQ3fA/ed2DA1XdYKSSoBW1Y1aNLFjm+B3zeFhNg1DRb9xcY1PAfpjjnyBO kKQL+VUPQyRbwSTX+MpPFRuvOH63r2VKW8LftgsFueskFuedMQmT/BCX+Eyuj4RE AXZcSJBMMcvQT24MOHuAhbNhY9wwycJYp/DvhEsOyLisPrhPPfp0UjX4igDJ+HkZ C2hEKgHHYGsAJHUKAYQ9H4NpdrkVScZq58c5lG1lFbX36+BslkRqvNN29VOQFOxg y/juetZ9ZuKp147g4TI6kAkdd8vVTRm9oZPlqtyJ9B1znH52o/ZAcLC24G3Roq/g Q56XmdPaCLajy60xTV4a00TQO8ZlLUUV2ySQamWeZd/oRy0/H5RGg7Aq6EP3da3c XVzf3IE8/8c3MH8xcDunI0P+cSqNmQYlIpGIsQvQOAv3kaLyENdaf8lxJqxVa7QA m8o/zXzJJiNmQrCpbM3Sphiv2lhiDz2acWNd1kEpPBb0omXXfvU= =/zxh -----END PGP SIGNATURE-----