-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 18 Aug 2026 22:50:18 -0400
Source: chromium
Architecture: source
Version: 151.0.7922.169-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (151.0.7922.169-1) unstable; urgency=high
.
* d/rules: remove optimize_for_size=true on armhf, as it didn't help.
* d/patches/debianization/rust-disable-debugsym.patch: add patch to
disable debug symbols for rust libs (to hopefully fix armhf linking).
* New upstream security release.
- CVE-2026-76034: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-76036: Buffer overflow in Dawn. Reported by Google.
- CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google
- CVE-2026-76037: Link following in CredentialProvider. Reported by Google
- CVE-2026-76044: Race condition in USB. Reported by Google.
- CVE-2026-76039: Incorrect reference resolution in Core.
Reported by Google.
- CVE-2026-76040: Use after free in Browser. Reported by Google.
- CVE-2026-76035: Inappropriate implementation in Media.
Reported by Google.
- CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google
- CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google.
- CVE-2026-76043: Incorrect calculation in V8.
Reported by Raghav Maheshwari.
- CVE-2026-76041: Information leak in Skia. Reported by Google.
- CVE-2026-76047: Type confusion in V8. Reported by ywatanabee.
- CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF.
- CVE-2026-76045: Use after free in WebGL.
Reported by OpenAI Codex Security (amyb).
Checksums-Sha1:
27305ab41deb8979d0ef01d90308c00a975672df 4388 chromium_151.0.7922.169-1.dsc
aaf6e9da88e48813c700f08215111a767b45c1d8 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
8e9bb53f0d3e3bc123ad72571fe0c2a8405ac31c 949170676 chromium_151.0.7922.169.orig.tar.xz
c3e851bfe91d9f60a16fe8ce1fd3b66c1ec6d3a5 549884 chromium_151.0.7922.169-1.debian.tar.xz
fde7ab4fdae75e32e04f275bd91537d7cfe9fecf 28262 chromium_151.0.7922.169-1_source.buildinfo
Checksums-Sha256:
511ee71ace04da677a46f50b4f31b402e6be5fca8faef0eee06d8bb7ecde8bd3 4388 chromium_151.0.7922.169-1.dsc
9b53e74936c5972394f0f850357b43b90798d9dbc5a688af35349e3d71d3a953 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
0d7b4920b69cb2c65ca52426459efe2ec3eecc240281798e53a6a08775c69f1e 949170676 chromium_151.0.7922.169.orig.tar.xz
7392fceb7d86c407ea451100e3e7d7efd29f55c868874ebf239b4568838938d1 549884 chromium_151.0.7922.169-1.debian.tar.xz
4577b1d954fc3100ed185139851ae2051ff152c53f78351366f8d4516cdd1178 28262 chromium_151.0.7922.169-1_source.buildinfo
Files:
1d939b482d4fec44b2a825b751698ba1 4388 web optional chromium_151.0.7922.169-1.dsc
5d65c9aa10e007270bd0d9cc358a6594 15076936 web optional chromium_151.0.7922.169.orig-pre-gen.tar.xz
d8bd1c9bd9d2515a98f2055dda35eef5 949170676 web optional chromium_151.0.7922.169.orig.tar.xz
c11da977fe0ba33aab086cff1ac2125d 549884 web optional chromium_151.0.7922.169-1.debian.tar.xz
6f173069f04833d2b42d180cc0281c1e 28262 web optional chromium_151.0.7922.169-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=s11V
-----END PGP SIGNATURE-----
