-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 18 Aug 2026 22:50:18 -0400 Source: chromium Architecture: source Version: 151.0.7922.169-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (151.0.7922.169-1~deb13u1) trixie-security; urgency=high . * d/rules: remove optimize_for_size=true on armhf, as it didn't help. * d/patches/debianization/rust-disable-debugsym.patch: add patch to disable debug symbols for rust libs (to hopefully fix armhf linking). * New upstream security release. - CVE-2026-76034: Buffer overflow in WebGL. Reported by Google. - CVE-2026-76036: Buffer overflow in Dawn. Reported by Google. - CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google - CVE-2026-76037: Link following in CredentialProvider. Reported by Google - CVE-2026-76044: Race condition in USB. Reported by Google. - CVE-2026-76039: Incorrect reference resolution in Core. Reported by Google. - CVE-2026-76040: Use after free in Browser. Reported by Google. - CVE-2026-76035: Inappropriate implementation in Media. Reported by Google. - CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google - CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google. - CVE-2026-76043: Incorrect calculation in V8. Reported by Raghav Maheshwari. - CVE-2026-76041: Information leak in Skia. Reported by Google. - CVE-2026-76047: Type confusion in V8. Reported by ywatanabee. - CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF. - CVE-2026-76045: Use after free in WebGL. Reported by OpenAI Codex Security (amyb). Checksums-Sha1: 153e1029052f04db94429a60ae6dc942402f6c02 4408 chromium_151.0.7922.169-1~deb13u1.dsc aaf6e9da88e48813c700f08215111a767b45c1d8 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz 8e9bb53f0d3e3bc123ad72571fe0c2a8405ac31c 949170676 chromium_151.0.7922.169.orig.tar.xz e045605cbd19fbe7d0942f424643396c2c383eb1 549884 chromium_151.0.7922.169-1~deb13u1.debian.tar.xz 4d6d32e34c2c7796358b879dd5f09e9c6ca0f8f1 27844 chromium_151.0.7922.169-1~deb13u1_source.buildinfo Checksums-Sha256: 4e8a4f5e93c378d83e870b254e79f887e8cacb32c09ed65829ad79e096bc5cd4 4408 chromium_151.0.7922.169-1~deb13u1.dsc 9b53e74936c5972394f0f850357b43b90798d9dbc5a688af35349e3d71d3a953 15076936 chromium_151.0.7922.169.orig-pre-gen.tar.xz 0d7b4920b69cb2c65ca52426459efe2ec3eecc240281798e53a6a08775c69f1e 949170676 chromium_151.0.7922.169.orig.tar.xz d1fabb871015ce5c015e0de816a462d900b3cf8d6e3d905160564987a7aa66f6 549884 chromium_151.0.7922.169-1~deb13u1.debian.tar.xz 2f12a5506a5756f3388b729c14b4f7cbb56061b5fb911f0b9e22c0ea8db5e2b1 27844 chromium_151.0.7922.169-1~deb13u1_source.buildinfo Files: 3d30717e5a9458e6f89a3fa03720b6ba 4408 web optional chromium_151.0.7922.169-1~deb13u1.dsc 5d65c9aa10e007270bd0d9cc358a6594 15076936 web optional chromium_151.0.7922.169.orig-pre-gen.tar.xz d8bd1c9bd9d2515a98f2055dda35eef5 949170676 web optional chromium_151.0.7922.169.orig.tar.xz 8c16591ffd58fe1787b13f2da38783c4 549884 web optional chromium_151.0.7922.169-1~deb13u1.debian.tar.xz ae849538cb4c6a50d20b044caeee60ed 27844 web optional chromium_151.0.7922.169-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmqFvasUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjch2A/6A4ZuQx8/J1fjSd1nbMpVSJZifiF4 6OYEOJAx+XAqKEJCDQBGuqvVgrZnWxOZO7hRB3J2ITquId/voSng/MFA9r/Gpmg7 jjLyNnpiC5bBUH9e+j37MmCs0OwumkW1g6s7xMik6uv7HI90L8zXhIFgQfDgw9ZE MLtihCd8f0Pwi/OufC9S5tP/WJGrOmIUbj1+x+eK+nLIzqT539W0gDkLzBJOsxFQ C3PFWdpymYAerluXOV4kCi5D/LN6WOEBqq8af1O81APzj5jj7HROgsuelW66DpuW oK8GztKW1K6X3dhE96MZ8f+aFhS/H6S5vtHxjO/tuPu95ESeVdbdTsQadh7TJaO7 BVncmO7PjK8fuWIr9pxfHGI/wVgwwXCSAv4GOUFjFECHjF90VRwA2EHY3utmlDhi BYnRq1eoRT54imrwKJjpk41iPs4i1q5xc8ai9gMMUa56RWp11coXroJ67Ha3sA5t pigxC+6hm0vUMzx3cF1ugd0gp2GxEWOoxgsRNpiEIFcAG4xkNmgFlvfLl8aqWLk8 jOzeDJk6179uSVLy6yoXpiDNcAo+RBz5cyo9M6hLxYYQt11Mg0Qptrm9DbuLt45e kjbl0ndbwtV32tF77JXbPNH1vnFvefcySwRDYhG5/NULZRE46yARrcAVgrGtRb/B bikswZA7mDXbaJc= =niF3 -----END PGP SIGNATURE-----