Security update for chromium

Chromium 155.0.8059.39 includes fixes for numerous security vulnerabilities identified by CVE identifiers ranging from CVE-2026-106182 through CVE-2026-106428 (partial list). The issues include use-after-free bugs in multiple components (e.g., Chromecast, Browser, Media, V8), uninitialized resource vulnerabilities in ANGLE and other modules, incorrect authorization checks in core components and APIs, race conditions in fonts and core, information leaks in proxy and enterprise components, integer overflows in WebGL and compositing, type confusion in ANGLE and V8, improper input validation in Omnibox and mobile, missing authorization in various features including Google Lens and FullScreen, confused deputy problems in Omnibox and contextual tasks, and code injection in ReaderMode. These vulnerabilities affect the Chromium browser and its components, potentially allowing attackers to execute arbitrary code, escalate privileges, leak sensitive information, or bypass security controls. The update to Chromium 155.0.8059.39 addresses these issues comprehensively.

The vulnerabilities fixed in this update are critical and affect multiple components of the Chromium browser. They include memory corruption (use-after-free), authorization bypasses, race conditions, information leaks, and code injection flaws. Exploitation could lead to arbitrary code execution, privilege escalation, unauthorized access to sensitive data, and other severe security impacts. The broad range of affected components increases the attack surface and risk.

A security update to Chromium version 155.0.8059.39 has been released that addresses all listed vulnerabilities. Users and administrators should apply this update promptly to mitigate the risks. No additional mitigation steps are indicated beyond applying the official update.