-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 18 Aug 2026 22:50:18 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 151.0.7922.169-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (151.0.7922.169-1~deb13u1) trixie-security; urgency=high
 .
   * d/rules: remove optimize_for_size=true on armhf, as it didn't help.
   * d/patches/debianization/rust-disable-debugsym.patch: add patch to
     disable debug symbols for rust libs (to hopefully fix armhf linking).
   * New upstream security release.
     - CVE-2026-76034: Buffer overflow in WebGL. Reported by Google.
     - CVE-2026-76036: Buffer overflow in Dawn. Reported by Google.
     - CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google
     - CVE-2026-76037: Link following in CredentialProvider. Reported by Google
     - CVE-2026-76044: Race condition in USB. Reported by Google.
     - CVE-2026-76039: Incorrect reference resolution in Core.
       Reported by Google.
     - CVE-2026-76040: Use after free in Browser. Reported by Google.
     - CVE-2026-76035: Inappropriate implementation in Media.
       Reported by Google.
     - CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google
     - CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google.
     - CVE-2026-76043: Incorrect calculation in V8.
       Reported by Raghav Maheshwari.
     - CVE-2026-76041: Information leak in Skia. Reported by Google.
     - CVE-2026-76047: Type confusion in V8. Reported by ywatanabee.
     - CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF.
     - CVE-2026-76045: Use after free in WebGL.
       Reported by OpenAI Codex Security (amyb).
Checksums-Sha1:
 535f96b9ed4d2e3458db8f5ad8b2f31a70b78b0b 8960796 chromium-l10n_151.0.7922.169-1~deb13u1_all.deb
 2f9fdbd2b74b5d7ef2f4acef972ef80f1fc18515 27661 chromium_151.0.7922.169-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 a909efa4ccd7597682f92d11d07c2e46267a89d92c5f61686d5f9523bb9ab05e 8960796 chromium-l10n_151.0.7922.169-1~deb13u1_all.deb
 7636e7a2e501c9143b4ba312bf6e01d2c6176433381e9de56471ab58121ab694 27661 chromium_151.0.7922.169-1~deb13u1_all-buildd.buildinfo
Files:
 95b2e6f6fb25afa7cd575bbf1f018d09 8960796 localization optional chromium-l10n_151.0.7922.169-1~deb13u1_all.deb
 c04c50e121c2e522799f39cf1b3f68d5 27661 web optional chromium_151.0.7922.169-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmqGSxIACgkQGNGWmfrq
ILF5fA//c/J5niu0cUxhqnnIuTlGfPfocdV5uF+h6ck6u0Nfr9CPcqEdSZmjL8aH
zFk7n3wh/Ls1wr+0L8e6qN32GYI6qOGD2S4vpqXgMSgyAfyLlNBCeGFEB19Ynz6n
JdStBSsjm/q7JjliWYXVKMeGEKyh6WQ73BXXX/VEaKiUT8j9MhLEfrKm042VYdCj
evSg6OTJRoQRTtseAVJX3CfbOv0J899ADNqmX5lDBsE2toomQX06f5ezXI+caH06
OMvpxXcl/of0/zuJ54cyQUPIf2bIJlaKznmLgQaBXHnXi9aU5hIBOuJUkVm4qmce
cjHvesgYicmWtXtuGNxtAOcnZi0gVrvU03gmYVh/UdIVe9oeO/s6GlXh3bM1lTMt
joWlyRWCBwyN0zxV3ekt4i3DmLSumew/elCnIKfqwxest8J/ocltbUIf+cc5QwGp
/w4qM3ac/vQkiQla7YKsz1KHm0SSSGh1RiM0YpWMUM0iGrSr+xcWZ48yOFC3W89P
iyu2NPLp5h+mOWaK8tyHHy8vY14BhhmylxV6ZuH5/egHvBh1wzVlIvD2KqRZC3AC
sB6zR0IMsf5396GbVETdxAS9cClpgWROmLdTNkXM0TMM5GDeejjzM0zOOAKz868B
TaMWh0NVH3EafsBpwxRX8Z/i2tlPe20tyV88HvG3ld3BS396ZvY=
=4XRW
-----END PGP SIGNATURE-----