Debian alert DLA-4654-1 (chromium)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 4654-1] chromium security update
Date:
             
 
Sat, 27 Jun 2026 19:52:58 +0200
Message-ID:
             
 
<20260627175258.550A05F0628D@kamino>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4654-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
June 27, 2026                                 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : chromium
Version        : 149.0.7827.196-1~deb12u1
CVE ID         : CVE-2026-13021 CVE-2026-13022 CVE-2026-13023 CVE-2026-13024
                 CVE-2026-13025 CVE-2026-13026 CVE-2026-13027 CVE-2026-13028
                 CVE-2026-13029 CVE-2026-13030 CVE-2026-13031 CVE-2026-13032
                 CVE-2026-13033 CVE-2026-13034 CVE-2026-13035 CVE-2026-13036
                 CVE-2026-13037 CVE-2026-13038

Security issues were discovered in Chromium which could result
in the execution of arbitrary code, denial of service, or information
disclosure.

For Debian 12 bookworm, these problems have been fixed in version
149.0.7827.196-1~deb12u1.

We recommend that you upgrade your chromium packages.

For the detailed security status of chromium please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/chromium

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=yoN+
-----END PGP SIGNATURE-----