-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Sep 2026 05:04:00 -0400
Source: chromium
Architecture: source
Version: 152.0.7977.82-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (152.0.7977.82-1) unstable; urgency=high
.
[ Andres Salomon ]
* d/patches:
- debianization/clang-version: fix to stop using gnu ld and instead
use llvm's lld-22 when linking rust libs.
- debianization/rust-disable-debugsym.patch: refresh for prior patch
changes.
* New upstream security release.
- CVE-2026-85046: Type confusion in V8.
Reported by Salvatore Gulizia (nickname: Serotav).
- CVE-2026-85052: Out of bounds read in CrashReporting.
Reported by Google.
- CVE-2026-85043: Incomplete cleanup in Network. Reported by Google.
- CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu.
- CVE-2026-85045: Race condition in V8.
Reported by Brendan Dolan-Gavitt, XBOW.
- CVE-2026-85050: Out of bounds write in WebGL. Reported by Google.
- CVE-2026-85053: Improper resource exposure in CacheStorage.
Reported by Salvatore Gulizia (Serotav).
- CVE-2026-85042: Use after free in DevTools. Reported by Google.
- CVE-2026-85049: Use after free in Skia. Reported by Google.
- CVE-2026-85051: Type confusion in Compositing. Reported by Google.
- CVE-2026-85047: Improper input validation in Transactions Platform.
Reported by Google.
- CVE-2026-85044: Use of released resource in Mobile. Reported by Google.
Checksums-Sha1:
31234f0732f524fea38ef63943e9d3cecef8ed1a 4378 chromium_152.0.7977.82-1.dsc
d22ec4444624b2104915f794b26d09e62f543cfc 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
b7cf20fdcd92c06c5d6ac070c679480f19c0a66d 959397088 chromium_152.0.7977.82.orig.tar.xz
1e3130d1d8feea764d9bfb08a38bd6f99c7d905f 556160 chromium_152.0.7977.82-1.debian.tar.xz
bfab14bc3d635942af0ed3c856bf1232367fe671 27085 chromium_152.0.7977.82-1_source.buildinfo
Checksums-Sha256:
83c556ae43466c7b17b684f872d00154f2f50e482bae4138b4dc1742536009c5 4378 chromium_152.0.7977.82-1.dsc
bc2ee549438e6ece87595338515afa61862dc2b851d27e48deb0f0fcf14f4446 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
f5fe953f30d21d5086e51aa1fde02fc61f9b4d2da8694ab72a494d1edefe416a 959397088 chromium_152.0.7977.82.orig.tar.xz
b6dcbbf76d0a8ae9904e2f11f90f938f2d05542ac7552a25acb481660e2b22e3 556160 chromium_152.0.7977.82-1.debian.tar.xz
5d1bfc6c604eee2ad65b498b9cf367898391bc59d7f88e99aa29726bde195899 27085 chromium_152.0.7977.82-1_source.buildinfo
Files:
10858a0b01114071c054b7840e00ee27 4378 web optional chromium_152.0.7977.82-1.dsc
fbf43a24195afbf3b292c4317ce4d914 15496764 web optional chromium_152.0.7977.82.orig-pre-gen.tar.xz
d6ecb436b35ce6416cbb79f234201215 959397088 web optional chromium_152.0.7977.82.orig.tar.xz
e42a9ad26aecc0cc1e70be7fff9f361f 556160 web optional chromium_152.0.7977.82-1.debian.tar.xz
a77980a2da089dabb245d7a84a0111f8 27085 web optional chromium_152.0.7977.82-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=StEX
-----END PGP SIGNATURE-----
