-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 18 Aug 2026 22:50:18 -0400
Source: chromium
Architecture: source
Version: 151.0.7922.169-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (151.0.7922.169-1~deb12u1) bookworm-security; urgency=high
.
* d/rules: remove optimize_for_size=true on armhf, as it didn't help.
* d/patches/debianization/rust-disable-debugsym.patch: add patch to
disable debug symbols for rust libs (to hopefully fix armhf linking).
* New upstream security release.
- CVE-2026-76034: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-76036: Buffer overflow in Dawn. Reported by Google.
- CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google
- CVE-2026-76037: Link following in CredentialProvider. Reported by Google
- CVE-2026-76044: Race condition in USB. Reported by Google.
- CVE-2026-76039: Incorrect reference resolution in Core.
Reported by Google.
- CVE-2026-76040: Use after free in Browser. Reported by Google.
- CVE-2026-76035: Inappropriate implementation in Media.
Reported by Google.
- CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google
- CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google.
- CVE-2026-76043: Incorrect calculation in V8.
Reported by Raghav Maheshwari.
- CVE-2026-76041: Information leak in Skia. Reported by Google.
- CVE-2026-76047: Type confusion in V8. Reported by ywatanabee.
- CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF.
- CVE-2026-76045: Use after free in WebGL.
Reported by OpenAI Codex Security (amyb).
Checksums-Sha1:
9bf6d8a7ab80ec2a065702ad1dc121aab1323341 4374 chromium_151.0.7922.169-1~deb12u1.dsc
aaf6e9da88e48813c700f08215111a767b45c1d8 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
8e9bb53f0d3e3bc123ad72571fe0c2a8405ac31c 949170676 chromium_151.0.7922.169.orig.tar.xz
6cf414574472a64fa635f357665b03811e30baf8 557764 chromium_151.0.7922.169-1~deb12u1.debian.tar.xz
f9422151fffc70b71264171736c1ef6c79b454fe 27247 chromium_151.0.7922.169-1~deb12u1_source.buildinfo
Checksums-Sha256:
a8a5b29197a12d870798bdc893b1a0a2e2cc32907eac354f0aaeb5505f9e91b8 4374 chromium_151.0.7922.169-1~deb12u1.dsc
9b53e74936c5972394f0f850357b43b90798d9dbc5a688af35349e3d71d3a953 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
0d7b4920b69cb2c65ca52426459efe2ec3eecc240281798e53a6a08775c69f1e 949170676 chromium_151.0.7922.169.orig.tar.xz
bdfcf84a04944f49d90c88a4408c568020bed829fe94a6068f17b04cfd321e9f 557764 chromium_151.0.7922.169-1~deb12u1.debian.tar.xz
c05831b5dce7703da584dac955bd230d63d34b251087ef61831f396790993eed 27247 chromium_151.0.7922.169-1~deb12u1_source.buildinfo
Files:
1c73b768110f6909a06b40b8ae025a36 4374 web optional chromium_151.0.7922.169-1~deb12u1.dsc
5d65c9aa10e007270bd0d9cc358a6594 15076936 web optional chromium_151.0.7922.169.orig-pre-gen.tar.xz
d8bd1c9bd9d2515a98f2055dda35eef5 949170676 web optional chromium_151.0.7922.169.orig.tar.xz
4c8df7cb93c80ac7b7369155542446e0 557764 web optional chromium_151.0.7922.169-1~deb12u1.debian.tar.xz
276ae5f81abf348a357741a5557e324c 27247 web optional chromium_151.0.7922.169-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=VYEF
-----END PGP SIGNATURE-----
