-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 22 Aug 2026 13:45:57 -0400 Source: chromium Architecture: source Version: 151.0.7922.173-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Closes: 1124059 1145071 Changes: chromium (151.0.7922.173-1~deb12u1) bookworm-security; urgency=high . * d/rules, d/control: switch to clang-22 now that it's also backported to stable and olstable (closes: #1124059). * d/control: bump rustc-web build-dep versioning up to 1.96, now that we have that in bookworm-proposed-updates. * d/patches: - trixie/adler.patch: drop, now that we have a newer rustc-web in bookworm. - llvm-19/static-assert.patch: drop, workaround no longer needed. - llvm-19/clang-19-crash.patch: drop, workaround no longer needed. - llvm-19/octal.patch: drop, workaround no longer needed. - llvm-19/value-or.patch: drop, workaround no longer needed. - llvm-19/clang19.patch: drop, workaround no longer needed. - llvm-19/iota.patch: drop, workaround no longer needed. - llvm-19/i18n-builder-enum.patch: drop, workaround no longer needed. - llvm-19/0001-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0002-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0003-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0004-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0005-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0007-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0008-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0009-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0011-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/privatefriends.patch: drop, workaround no longer needed. - llvm-19/constexpr.patch: drop, workaround no longer needed. - system/llvm.patch: add patch to remove dependencies on vendored llvm. - llvm-22/clang22.patch: add patch for unsupported compiler options. - llvm-19/clone-traits.patch -> llvm-22/clone-traits.patch. - llvm-19/const-profile.patch -> llvm-22/const-profile.patch. - llvm-19/keyfactory.patch -> llvm-22/keyfactory.patch. - llvm-19/raw-ref-map-find.patch -> llvm-22/raw-ref-map-find.patch. - ungoogled/disable-tos-dialog.patch: add patch from u-c to disable initial pop-up terms of service screen (closes: #1145071). * New upstream security release. - CVE-2026-76017: Use after free in Chromoting. Reported by Google. - CVE-2026-76018: Privilege elevation in Import. Reported by Google. - CVE-2026-76019: Incorrect authorization in Workers. Reported by Anonymous. - CVE-2026-76020: Race condition in V8. Reported by Salvatore Gulizia (nickname: Serotav). - CVE-2026-76021: Use after free in DOM. Reported by Google BigSleep@Grape. - CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro. - CVE-2026-76023: Improper resource control in Linux Toolkit Theming. Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research. Checksums-Sha1: cae7e59daba4b5c584ad3aea90ba4890a6a99dee 4378 chromium_151.0.7922.173-1~deb12u1.dsc e8a33e163c4504ada58756ba33a4ca6f53fa0949 15076612 chromium_151.0.7922.173.orig-pre-gen.tar.xz 85856ebfb3a68afd1ee3b7ba7234ae32ab3f4699 949139744 chromium_151.0.7922.173.orig.tar.xz adf9faac19b3d139ac4f1ac9a6c8c8c2c8d6944a 558628 chromium_151.0.7922.173-1~deb12u1.debian.tar.xz 6a0c234a85b3c1b91a61a9358ce8fe885e3bc78f 27205 chromium_151.0.7922.173-1~deb12u1_source.buildinfo Checksums-Sha256: 976dc743b009732e854fef46d7758c833218967dd44de867033e22730679d188 4378 chromium_151.0.7922.173-1~deb12u1.dsc 4655486724e0f2765949d439d8e8caee4801ce47ed9f2bd52bcb8236fbecdeb6 15076612 chromium_151.0.7922.173.orig-pre-gen.tar.xz d0330f43015f2538a69bdb66a13a9f955f44c8dbc1bcaed4452d54858ee0709c 949139744 chromium_151.0.7922.173.orig.tar.xz d6b13903463346a8134139a676e45fff89a9e968e511140e188fc43676423403 558628 chromium_151.0.7922.173-1~deb12u1.debian.tar.xz a23867606b47783e7943fc824ecf5c6165665d55bfc943cd20967d41c0ae6b1e 27205 chromium_151.0.7922.173-1~deb12u1_source.buildinfo Files: adf074162298bf82f83e051b73f5a385 4378 web optional chromium_151.0.7922.173-1~deb12u1.dsc 52e8670c46cd17bb6fb9c2a4e7ff0919 15076612 web optional chromium_151.0.7922.173.orig-pre-gen.tar.xz 45cc4c024467ba536e8a511c407d5953 949139744 web optional chromium_151.0.7922.173.orig.tar.xz f1d1309ad3811534919fad827d6576a6 558628 web optional chromium_151.0.7922.173-1~deb12u1.debian.tar.xz 7326137fec2566be24aab8683880aa20 27205 web optional chromium_151.0.7922.173-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmqLMpMUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeS5Q/9FNSW+c3zjv4W/CJRiKMWhwzpY/by gUaLQRaZMagGfc608PxSoT7PZP2BQRrWstYTMzE9flZ+uZMbTY5VVrWHThObsU9w xGsmw79FkrqFpfPV5AMmVEOi/BgI4dmTzvHHnXlEFLqwbtwiWcJpM9z3AyVGYd5V DTtAcNx6/7wPN+/oU6CWJDLptF7nYHMgIxDvwleWKKGrsO/7qk1yU+SoHCik44Ib kCBWj6P0+I96kvDtVmL1dAcdGyX8nBMOWiI1ZOrSyBgUKoX59DgnAd/osKIL6RjL fYhjLMwYJZGeE3MT5R8/X+UWSa3yT7XoZniOfNoxPNCYHncb/QO9c31gI93ZsdUn Q6dY3h5/9YmOHx6XLaUt6aio14aIWDf0Dd51fZhJgyTuwcvA9paq38BrlRAddjB5 t5xhXlTzl+dIbYZv2hS6B67IB+tuUV+B5snu/zzuKrizWtFhMuEAEixelb+i0wsv +TGFLjA+wnFmVcE7rCqGPh+zFOi8GEkyvE+KZLXvQWsBN0YuDZ9kkHi4lIl2llZM /kYJMN8ltx6ic0V7d3wWEjTwAx4VJAcnh6u7OlGCNiJGggXkjAnF06AUrOT8V+GG aCQAPr7/ai3Z44Lb2FCbaNsVNIIRVThuU1Sf1hIYEo+ss1cDnae6wZ4l1IWWmnfE HZ+vpQo8huRz/gU= =qaLp -----END PGP SIGNATURE-----
