-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 22 Aug 2026 13:45:57 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 151.0.7922.173-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Closes: 1124059 1145071
Changes:
 chromium (151.0.7922.173-1~deb13u1) trixie-security; urgency=high
 .
   * d/rules, d/control: switch to clang-22 now that it's also backported
     to stable and olstable (closes: #1124059).
   * d/patches:
     - llvm-19/static-assert.patch: drop, workaround no longer needed.
     - llvm-19/clang-19-crash.patch: drop, workaround no longer needed.
     - llvm-19/octal.patch: drop, workaround no longer needed.
     - llvm-19/value-or.patch: drop, workaround no longer needed.
     - llvm-19/clang19.patch: drop, workaround no longer needed.
     - llvm-19/iota.patch: drop, workaround no longer needed.
     - llvm-19/i18n-builder-enum.patch: drop, workaround no longer needed.
     - llvm-19/0001-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0002-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0003-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0004-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0005-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0007-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0008-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0009-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0011-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/privatefriends.patch: drop, workaround no longer needed.
     - llvm-19/constexpr.patch: drop, workaround no longer needed.
     - system/llvm.patch: add patch to remove dependencies on vendored llvm.
     - llvm-22/clang22.patch: add patch for unsupported compiler options.
     - llvm-19/clone-traits.patch -> llvm-22/clone-traits.patch.
     - llvm-19/const-profile.patch -> llvm-22/const-profile.patch.
     - llvm-19/keyfactory.patch -> llvm-22/keyfactory.patch.
     - llvm-19/raw-ref-map-find.patch -> llvm-22/raw-ref-map-find.patch.
     - ungoogled/disable-tos-dialog.patch: add patch from u-c to disable
       initial pop-up terms of service screen (closes: #1145071).
   * New upstream security release.
     - CVE-2026-76017: Use after free in Chromoting. Reported by Google.
     - CVE-2026-76018: Privilege elevation in Import. Reported by Google.
     - CVE-2026-76019: Incorrect authorization in Workers.
       Reported by Anonymous.
     - CVE-2026-76020: Race condition in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-76021: Use after free in DOM.
       Reported by Google BigSleep@Grape.
     - CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro.
     - CVE-2026-76023: Improper resource control in Linux Toolkit Theming.
       Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research.
Checksums-Sha1:
 6b67efff38f9eba003bbcbe6b46168b2b57af3e5 8922552 chromium-l10n_151.0.7922.173-1~deb13u1_all.deb
 26e5e15a5e45d75710f29686fd68d315a4bdbe22 27867 chromium_151.0.7922.173-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 890d5d0c753416900162accc0662a5cf61f0c8981a00d961624cddaab9932892 8922552 chromium-l10n_151.0.7922.173-1~deb13u1_all.deb
 30736feb0509157c4a1bef0a3ee9571c89600b48c2678747fe227053ae166e88 27867 chromium_151.0.7922.173-1~deb13u1_all-buildd.buildinfo
Files:
 7351e1cb5c3b76398e664057762f0c38 8922552 localization optional chromium-l10n_151.0.7922.173-1~deb13u1_all.deb
 9522f205101a4ab73f057096aa74ce25 27867 web optional chromium_151.0.7922.173-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Dg5A
-----END PGP SIGNATURE-----