-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Jul 2026 01:45:42 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 150.0.7871.114-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (150.0.7871.114-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-15112: Use after free in Ozone. Reported by Google.
     - CVE-2026-15129: Use after free in Views. Reported by Google.
     - CVE-2026-15132: Uninitialized Use in V8.
       Reported by Pierre Langlois from Arm.
     - CVE-2026-15133: Use after free in InterestGroups. Reported by Jihyeon
       Jeong (Compsec Lab, Seoul National University / Research Intern).
     - CVE-2026-15108: Integer overflow in Extensions API. Reported by Google.
     - CVE-2026-15109: Uninitialized Use in ANGLE. Reported by Google.
     - CVE-2026-15110: Use after free in Extensions. Reported by Google.
     - CVE-2026-15111: Use after free in Views. Reported by Google.
     - CVE-2026-15113: Use after free in Autofill. Reported by Google.
     - CVE-2026-15114: Out of bounds read and write in Codecs.
       Reported by Google.
     - CVE-2026-15115: Insufficient validation of untrusted input in
       WebAppInstalls. Reported by Google.
     - CVE-2026-15116: Use after free in Actor. Reported by Google.
     - CVE-2026-15117: Use after free in Payments. Reported by Google.
     - CVE-2026-15118: Use after free in Input. Reported by Google.
     - CVE-2026-15119: Inappropriate implementation in GetUserMedia.
       Reported by Google.
     - CVE-2026-15120: Use after free in Core. Reported by Google.
     - CVE-2026-15121: Use after free in WebRTC. Reported by Google.
     - CVE-2026-15122: Insufficient validation of untrusted input in Codecs.
       Reported by Google.
     - CVE-2026-15123: Insufficient data validation in DOM. Reported by Google
     - CVE-2026-15124: Insufficient policy enforcement in Passwords.
       Reported by Google.
     - CVE-2026-15125: Inappropriate implementation in Forms.
       Reported by Google.
     - CVE-2026-15126: Use after free in Forms. Reported by Google.
     - CVE-2026-15127: Inappropriate implementation in WebGL.
       Reported by Google.
     - CVE-2026-15128: Inappropriate implementation in Forms.
       Reported by Google.
     - CVE-2026-15130: Insufficient policy enforcement in Navigation.
       Reported by Google.
     - CVE-2026-15107: Use after free in IndexedDB.
       Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab.
     - CVE-2026-15131: Insufficient data validation in Navigation.
       Reported by Google.
Checksums-Sha1:
 394160e6b63302d0a1cde7c3e30edfa60677ac97 8806580 chromium-l10n_150.0.7871.114-1~deb13u1_all.deb
 880561097e5cb82a43db0d262c5d8cc74e4925e6 27290 chromium_150.0.7871.114-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 9587e3f57c4fa09ad33e2818c9ce4eae2a08dea5bcd345faa902f52bd064c9f4 8806580 chromium-l10n_150.0.7871.114-1~deb13u1_all.deb
 9dc7a1907b760720624118bfcf6376b4fadda4ee930c8fcaaf2c38b61e96bc72 27290 chromium_150.0.7871.114-1~deb13u1_all-buildd.buildinfo
Files:
 55ff5b5451b0bc3bec02c5d542ac44ee 8806580 localization optional chromium-l10n_150.0.7871.114-1~deb13u1_all.deb
 a7abb9f7916d24e8d6f96aa4284e3c5a 27290 web optional chromium_150.0.7871.114-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Ij/F
-----END PGP SIGNATURE-----