-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Sep 2026 05:04:00 -0400
Source: chromium
Architecture: source
Version: 152.0.7977.82-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (152.0.7977.82-1~deb12u1) bookworm-security; urgency=high
.
[ Andres Salomon ]
* d/patches:
- debianization/clang-version: fix to stop using gnu ld and instead
use llvm's lld-22 when linking rust libs.
- debianization/rust-disable-debugsym.patch: refresh for prior patch
changes.
* New upstream security release.
- CVE-2026-85046: Type confusion in V8.
Reported by Salvatore Gulizia (nickname: Serotav).
- CVE-2026-85052: Out of bounds read in CrashReporting.
Reported by Google.
- CVE-2026-85043: Incomplete cleanup in Network. Reported by Google.
- CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu.
- CVE-2026-85045: Race condition in V8.
Reported by Brendan Dolan-Gavitt, XBOW.
- CVE-2026-85050: Out of bounds write in WebGL. Reported by Google.
- CVE-2026-85053: Improper resource exposure in CacheStorage.
Reported by Salvatore Gulizia (Serotav).
- CVE-2026-85042: Use after free in DevTools. Reported by Google.
- CVE-2026-85049: Use after free in Skia. Reported by Google.
- CVE-2026-85051: Type confusion in Compositing. Reported by Google.
- CVE-2026-85047: Improper input validation in Transactions Platform.
Reported by Google.
- CVE-2026-85044: Use of released resource in Mobile. Reported by Google.
Checksums-Sha1:
00ac2401468e2ffc5d186a0dd5b036f66d742750 4368 chromium_152.0.7977.82-1~deb12u1.dsc
d22ec4444624b2104915f794b26d09e62f543cfc 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
b7cf20fdcd92c06c5d6ac070c679480f19c0a66d 959397088 chromium_152.0.7977.82.orig.tar.xz
f75b0dea81c70fab768f27bbf3b6cb5fdc59cef6 564392 chromium_152.0.7977.82-1~deb12u1.debian.tar.xz
b776cbb4b7db8581d0477955d3208449c99236c1 27201 chromium_152.0.7977.82-1~deb12u1_source.buildinfo
Checksums-Sha256:
6dad596f319071bfee7146a547a69d9474cd95307da94ecc28b4d15997130c62 4368 chromium_152.0.7977.82-1~deb12u1.dsc
bc2ee549438e6ece87595338515afa61862dc2b851d27e48deb0f0fcf14f4446 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
f5fe953f30d21d5086e51aa1fde02fc61f9b4d2da8694ab72a494d1edefe416a 959397088 chromium_152.0.7977.82.orig.tar.xz
b1f3c0485c432f1b64ac8e84f354935357aaa43c445f9551d6e3aa4c0d60af26 564392 chromium_152.0.7977.82-1~deb12u1.debian.tar.xz
efc33aa0c068cb12d0ef47f700e16536d93d3c36e779b554cf844841b5414224 27201 chromium_152.0.7977.82-1~deb12u1_source.buildinfo
Files:
f6ce4f731b8161bf165b99634f811fec 4368 web optional chromium_152.0.7977.82-1~deb12u1.dsc
fbf43a24195afbf3b292c4317ce4d914 15496764 web optional chromium_152.0.7977.82.orig-pre-gen.tar.xz
d6ecb436b35ce6416cbb79f234201215 959397088 web optional chromium_152.0.7977.82.orig.tar.xz
5414d50c5ca4b3bf070ec62c01418df1 564392 web optional chromium_152.0.7977.82-1~deb12u1.debian.tar.xz
cf6cc155fbed6f817136a64984e92f40 27201 web optional chromium_152.0.7977.82-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=y84d
-----END PGP SIGNATURE-----
