-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 18 Aug 2026 22:50:18 -0400
Source: chromium
Architecture: source
Version: 151.0.7922.169-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (151.0.7922.169-1~deb13u1) trixie-security; urgency=high
.
* d/rules: remove optimize_for_size=true on armhf, as it didn't help.
* d/patches/debianization/rust-disable-debugsym.patch: add patch to
disable debug symbols for rust libs (to hopefully fix armhf linking).
* New upstream security release.
- CVE-2026-76034: Buffer overflow in WebGL. Reported by Google.
- CVE-2026-76036: Buffer overflow in Dawn. Reported by Google.
- CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google
- CVE-2026-76037: Link following in CredentialProvider. Reported by Google
- CVE-2026-76044: Race condition in USB. Reported by Google.
- CVE-2026-76039: Incorrect reference resolution in Core.
Reported by Google.
- CVE-2026-76040: Use after free in Browser. Reported by Google.
- CVE-2026-76035: Inappropriate implementation in Media.
Reported by Google.
- CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google
- CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google.
- CVE-2026-76043: Incorrect calculation in V8.
Reported by Raghav Maheshwari.
- CVE-2026-76041: Information leak in Skia. Reported by Google.
- CVE-2026-76047: Type confusion in V8. Reported by ywatanabee.
- CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF.
- CVE-2026-76045: Use after free in WebGL.
Reported by OpenAI Codex Security (amyb).
Checksums-Sha1:
153e1029052f04db94429a60ae6dc942402f6c02 4408 chromium_151.0.7922.169-1~deb13u1.dsc
aaf6e9da88e48813c700f08215111a767b45c1d8 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
8e9bb53f0d3e3bc123ad72571fe0c2a8405ac31c 949170676 chromium_151.0.7922.169.orig.tar.xz
e045605cbd19fbe7d0942f424643396c2c383eb1 549884 chromium_151.0.7922.169-1~deb13u1.debian.tar.xz
4d6d32e34c2c7796358b879dd5f09e9c6ca0f8f1 27844 chromium_151.0.7922.169-1~deb13u1_source.buildinfo
Checksums-Sha256:
4e8a4f5e93c378d83e870b254e79f887e8cacb32c09ed65829ad79e096bc5cd4 4408 chromium_151.0.7922.169-1~deb13u1.dsc
9b53e74936c5972394f0f850357b43b90798d9dbc5a688af35349e3d71d3a953 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz
0d7b4920b69cb2c65ca52426459efe2ec3eecc240281798e53a6a08775c69f1e 949170676 chromium_151.0.7922.169.orig.tar.xz
d1fabb871015ce5c015e0de816a462d900b3cf8d6e3d905160564987a7aa66f6 549884 chromium_151.0.7922.169-1~deb13u1.debian.tar.xz
2f12a5506a5756f3388b729c14b4f7cbb56061b5fb911f0b9e22c0ea8db5e2b1 27844 chromium_151.0.7922.169-1~deb13u1_source.buildinfo
Files:
3d30717e5a9458e6f89a3fa03720b6ba 4408 web optional chromium_151.0.7922.169-1~deb13u1.dsc
5d65c9aa10e007270bd0d9cc358a6594 15076936 web optional chromium_151.0.7922.169.orig-pre-gen.tar.xz
d8bd1c9bd9d2515a98f2055dda35eef5 949170676 web optional chromium_151.0.7922.169.orig.tar.xz
8c16591ffd58fe1787b13f2da38783c4 549884 web optional chromium_151.0.7922.169-1~deb13u1.debian.tar.xz
ae849538cb4c6a50d20b044caeee60ed 27844 web optional chromium_151.0.7922.169-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=niF3
-----END PGP SIGNATURE-----
