-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Sep 2026 05:04:00 -0400
Source: chromium
Architecture: source
Version: 152.0.7977.82-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (152.0.7977.82-1~deb13u1) trixie-security; urgency=high
.
[ Andres Salomon ]
* d/patches:
- debianization/clang-version: fix to stop using gnu ld and instead
use llvm's lld-22 when linking rust libs.
- debianization/rust-disable-debugsym.patch: refresh for prior patch
changes.
* New upstream security release.
- CVE-2026-85046: Type confusion in V8.
Reported by Salvatore Gulizia (nickname: Serotav).
- CVE-2026-85052: Out of bounds read in CrashReporting.
Reported by Google.
- CVE-2026-85043: Incomplete cleanup in Network. Reported by Google.
- CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu.
- CVE-2026-85045: Race condition in V8.
Reported by Brendan Dolan-Gavitt, XBOW.
- CVE-2026-85050: Out of bounds write in WebGL. Reported by Google.
- CVE-2026-85053: Improper resource exposure in CacheStorage.
Reported by Salvatore Gulizia (Serotav).
- CVE-2026-85042: Use after free in DevTools. Reported by Google.
- CVE-2026-85049: Use after free in Skia. Reported by Google.
- CVE-2026-85051: Type confusion in Compositing. Reported by Google.
- CVE-2026-85047: Improper input validation in Transactions Platform.
Reported by Google.
- CVE-2026-85044: Use of released resource in Mobile. Reported by Google.
Checksums-Sha1:
9da98e8b513f8c7bc32dc36fe487c6c7e6b7ef93 4406 chromium_152.0.7977.82-1~deb13u1.dsc
d22ec4444624b2104915f794b26d09e62f543cfc 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
b7cf20fdcd92c06c5d6ac070c679480f19c0a66d 959397088 chromium_152.0.7977.82.orig.tar.xz
1fa626875da86901528e4f48909fe49b5dfbe5cf 556552 chromium_152.0.7977.82-1~deb13u1.debian.tar.xz
3688d053c1a3c83efe77da9bdd6654cda943643a 27920 chromium_152.0.7977.82-1~deb13u1_source.buildinfo
Checksums-Sha256:
ecb2091d0040dfe8ec601ed41862dbb871f2c02efb6536f297076dbb533750f3 4406 chromium_152.0.7977.82-1~deb13u1.dsc
bc2ee549438e6ece87595338515afa61862dc2b851d27e48deb0f0fcf14f4446 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz
f5fe953f30d21d5086e51aa1fde02fc61f9b4d2da8694ab72a494d1edefe416a 959397088 chromium_152.0.7977.82.orig.tar.xz
40ca28d4972762ffa38009395dc0d7352773ccf18e535d0f724dc6857d8dd2ee 556552 chromium_152.0.7977.82-1~deb13u1.debian.tar.xz
4a20d8206341e745a1b864c71f584e0e0427d6b8b38a5e62e1835dc318f524b5 27920 chromium_152.0.7977.82-1~deb13u1_source.buildinfo
Files:
efc2ed208d0eadbe369d31c4991693da 4406 web optional chromium_152.0.7977.82-1~deb13u1.dsc
fbf43a24195afbf3b292c4317ce4d914 15496764 web optional chromium_152.0.7977.82.orig-pre-gen.tar.xz
d6ecb436b35ce6416cbb79f234201215 959397088 web optional chromium_152.0.7977.82.orig.tar.xz
9554b7cfddacd4ae994fe25a87fab09a 556552 web optional chromium_152.0.7977.82-1~deb13u1.debian.tar.xz
e4084553d93ed7ecafb4cbcee7494823 27920 web optional chromium_152.0.7977.82-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=DaLK
-----END PGP SIGNATURE-----
