-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 22 Aug 2026 13:45:57 -0400 Source: chromium Architecture: source Version: 151.0.7922.173-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Closes: 1124059 1145071 Changes: chromium (151.0.7922.173-1~deb13u1) trixie-security; urgency=high . * d/rules, d/control: switch to clang-22 now that it's also backported to stable and olstable (closes: #1124059). * d/patches: - llvm-19/static-assert.patch: drop, workaround no longer needed. - llvm-19/clang-19-crash.patch: drop, workaround no longer needed. - llvm-19/octal.patch: drop, workaround no longer needed. - llvm-19/value-or.patch: drop, workaround no longer needed. - llvm-19/clang19.patch: drop, workaround no longer needed. - llvm-19/iota.patch: drop, workaround no longer needed. - llvm-19/i18n-builder-enum.patch: drop, workaround no longer needed. - llvm-19/0001-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0002-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0003-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0004-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0005-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0007-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0008-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0009-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0011-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/privatefriends.patch: drop, workaround no longer needed. - llvm-19/constexpr.patch: drop, workaround no longer needed. - system/llvm.patch: add patch to remove dependencies on vendored llvm. - llvm-22/clang22.patch: add patch for unsupported compiler options. - llvm-19/clone-traits.patch -> llvm-22/clone-traits.patch. - llvm-19/const-profile.patch -> llvm-22/const-profile.patch. - llvm-19/keyfactory.patch -> llvm-22/keyfactory.patch. - llvm-19/raw-ref-map-find.patch -> llvm-22/raw-ref-map-find.patch. - ungoogled/disable-tos-dialog.patch: add patch from u-c to disable initial pop-up terms of service screen (closes: #1145071). * New upstream security release. - CVE-2026-76017: Use after free in Chromoting. Reported by Google. - CVE-2026-76018: Privilege elevation in Import. Reported by Google. - CVE-2026-76019: Incorrect authorization in Workers. Reported by Anonymous. - CVE-2026-76020: Race condition in V8. Reported by Salvatore Gulizia (nickname: Serotav). - CVE-2026-76021: Use after free in DOM. Reported by Google BigSleep@Grape. - CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro. - CVE-2026-76023: Improper resource control in Linux Toolkit Theming. Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research. Checksums-Sha1: c9e69d0ada0ea9bd1e6f79e9cda767d0aa751460 4408 chromium_151.0.7922.173-1~deb13u1.dsc e8a33e163c4504ada58756ba33a4ca6f53fa0949 15076612 chromium_151.0.7922.173.orig-pre-gen.tar.xz 85856ebfb3a68afd1ee3b7ba7234ae32ab3f4699 949139744 chromium_151.0.7922.173.orig.tar.xz 89ca827ec579b1f1de864213c396a323bf76bc0e 550740 chromium_151.0.7922.173-1~deb13u1.debian.tar.xz 94880efdb04ebef577bdb88419b09afcb3544cfe 27857 chromium_151.0.7922.173-1~deb13u1_source.buildinfo Checksums-Sha256: 9ed2e1d02d10a0eaa7d5f08c513ce0ac459b0dfa10ef14dfe98dede89bff2fc6 4408 chromium_151.0.7922.173-1~deb13u1.dsc 4655486724e0f2765949d439d8e8caee4801ce47ed9f2bd52bcb8236fbecdeb6 15076612 chromium_151.0.7922.173.orig-pre-gen.tar.xz d0330f43015f2538a69bdb66a13a9f955f44c8dbc1bcaed4452d54858ee0709c 949139744 chromium_151.0.7922.173.orig.tar.xz 2eb1314335e5761d1930e6e029931dd2b398fd755ba9e02ffc16a1eee1b4cf3a 550740 chromium_151.0.7922.173-1~deb13u1.debian.tar.xz 08e1c5b1219ea5d80a3c9c1bf842a5904c2dd83e4c6457bae915137f295288e9 27857 chromium_151.0.7922.173-1~deb13u1_source.buildinfo Files: 8f1119500ad7735f70d81a755accc7fb 4408 web optional chromium_151.0.7922.173-1~deb13u1.dsc 52e8670c46cd17bb6fb9c2a4e7ff0919 15076612 web optional chromium_151.0.7922.173.orig-pre-gen.tar.xz 45cc4c024467ba536e8a511c407d5953 949139744 web optional chromium_151.0.7922.173.orig.tar.xz 1296073a3c5e7dafd5afda537d4a1375 550740 web optional chromium_151.0.7922.173-1~deb13u1.debian.tar.xz e7496060a99bdb3b4512a54e4824a45b 27857 web optional chromium_151.0.7922.173-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmqKclYUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjcwFQ/+Oll2fMQt4ZIqLLZ+JBVUfv+voshd /lHaxMY5kZkRsKbP9jEGc7HvNrSxgPRfe26x5wP/zIXlGn8KzTAeYm/Qga3YJ7sj zB0kCt85BAcDpB6Bm8ZfeTtWzBAKe0Y13pckYDyfHZuhCLBUtsVguwzg2Wimc/tq UuXCeRNZZGoMWM2WwNFToxsqFVEq5nKz1S4ZmGAwwG8iNMll0KKT6TmPu0EkFtl3 PBKXrgDuv3Z4p5UcdUhliu2m+tXCFDTY6IgrbECTQxEBKn+lN8q8SoldjUiNLclq 9UjHG6EeDdlYjsfeqj+skzoglLmCh6x5PfITUFayWK8RNy7QJEOCe3lGCgmUv4nL Z6B/I9suZ9wdxSW/blYpvGja0m/9WttzhQhBwZeRvXLBjuCTY77aI/rVlPGp9itk P2E/+snJWXA7QfgO4rFVqTr3SFqhHBRA3zf2hO5zMyYHVpCKB81t6/oABrRmH9ZG h+/m2O6kR+/NQsXlqYgsFx1sFmboKllVX/FbWPdu+ZtmrrCKpVJ/3emfvsf/ig1+ kl1OaCPirFQsfFvWBiObZWpHU3GuWLCGWV2aPn1dalY9K/oKKrUpPBf+f4LOpnDb HXJoZCzuu8HRH3zyeI1krFQdJrK0govwpwFvUyQd24VNAbIRyIhJ/lhJasSrBb3p 8PiIiE+X2N0PlKY= =dP7o -----END PGP SIGNATURE-----
