-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 04 Sep 2026 05:04:00 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 152.0.7977.82-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (152.0.7977.82-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * d/patches:
     - debianization/clang-version: fix to stop using gnu ld and instead
       use llvm's lld-22 when linking rust libs.
     - debianization/rust-disable-debugsym.patch: refresh for prior patch
       changes.
   * New upstream security release.
     - CVE-2026-85046: Type confusion in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-85052: Out of bounds read in CrashReporting.
       Reported by Google.
     - CVE-2026-85043: Incomplete cleanup in Network. Reported by Google.
     - CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu.
     - CVE-2026-85045: Race condition in V8.
       Reported by Brendan Dolan-Gavitt, XBOW.
     - CVE-2026-85050: Out of bounds write in WebGL. Reported by Google.
     - CVE-2026-85053: Improper resource exposure in CacheStorage.
       Reported by Salvatore Gulizia (Serotav).
     - CVE-2026-85042: Use after free in DevTools. Reported by Google.
     - CVE-2026-85049: Use after free in Skia. Reported by Google.
     - CVE-2026-85051: Type confusion in Compositing. Reported by Google.
     - CVE-2026-85047: Improper input validation in Transactions Platform.
       Reported by Google.
     - CVE-2026-85044: Use of released resource in Mobile. Reported by Google.
Checksums-Sha1:
 672e84322456cdc82382cb5c98a1cfa78f33ded0 9079260 chromium-l10n_152.0.7977.82-1~deb13u1_all.deb
 bc0f578cd22054e6980b8e80b55d3b947b406170 27929 chromium_152.0.7977.82-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 a6dba174b1167f3319f5a06c04fac6a2c2b2f2a82ff6cf69b83e61e16b49f1ed 9079260 chromium-l10n_152.0.7977.82-1~deb13u1_all.deb
 9eb38250416ef24fab6550d695fcadcad277e111a9d68f5e0844a701cc6d213f 27929 chromium_152.0.7977.82-1~deb13u1_all-buildd.buildinfo
Files:
 a5bb4bfe3dcd0fcdcc8e474e6ca7a3c5 9079260 localization optional chromium-l10n_152.0.7977.82-1~deb13u1_all.deb
 65a8f732858159747a424e291a2836cc 27929 web optional chromium_152.0.7977.82-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=pQ6i
-----END PGP SIGNATURE-----