-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 04 Sep 2026 05:04:00 -0400 Source: chromium Architecture: source Version: 152.0.7977.82-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (152.0.7977.82-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * d/patches: - debianization/clang-version: fix to stop using gnu ld and instead use llvm's lld-22 when linking rust libs. - debianization/rust-disable-debugsym.patch: refresh for prior patch changes. * New upstream security release. - CVE-2026-85046: Type confusion in V8. Reported by Salvatore Gulizia (nickname: Serotav). - CVE-2026-85052: Out of bounds read in CrashReporting. Reported by Google. - CVE-2026-85043: Incomplete cleanup in Network. Reported by Google. - CVE-2026-85048: Use after free in Compositing. Reported by Ngoc Hieu. - CVE-2026-85045: Race condition in V8. Reported by Brendan Dolan-Gavitt, XBOW. - CVE-2026-85050: Out of bounds write in WebGL. Reported by Google. - CVE-2026-85053: Improper resource exposure in CacheStorage. Reported by Salvatore Gulizia (Serotav). - CVE-2026-85042: Use after free in DevTools. Reported by Google. - CVE-2026-85049: Use after free in Skia. Reported by Google. - CVE-2026-85051: Type confusion in Compositing. Reported by Google. - CVE-2026-85047: Improper input validation in Transactions Platform. Reported by Google. - CVE-2026-85044: Use of released resource in Mobile. Reported by Google. Checksums-Sha1: 9da98e8b513f8c7bc32dc36fe487c6c7e6b7ef93 4406 chromium_152.0.7977.82-1~deb13u1.dsc d22ec4444624b2104915f794b26d09e62f543cfc 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz b7cf20fdcd92c06c5d6ac070c679480f19c0a66d 959397088 chromium_152.0.7977.82.orig.tar.xz 1fa626875da86901528e4f48909fe49b5dfbe5cf 556552 chromium_152.0.7977.82-1~deb13u1.debian.tar.xz 3688d053c1a3c83efe77da9bdd6654cda943643a 27920 chromium_152.0.7977.82-1~deb13u1_source.buildinfo Checksums-Sha256: ecb2091d0040dfe8ec601ed41862dbb871f2c02efb6536f297076dbb533750f3 4406 chromium_152.0.7977.82-1~deb13u1.dsc bc2ee549438e6ece87595338515afa61862dc2b851d27e48deb0f0fcf14f4446 15496764 chromium_152.0.7977.82.orig-pre-gen.tar.xz f5fe953f30d21d5086e51aa1fde02fc61f9b4d2da8694ab72a494d1edefe416a 959397088 chromium_152.0.7977.82.orig.tar.xz 40ca28d4972762ffa38009395dc0d7352773ccf18e535d0f724dc6857d8dd2ee 556552 chromium_152.0.7977.82-1~deb13u1.debian.tar.xz 4a20d8206341e745a1b864c71f584e0e0427d6b8b38a5e62e1835dc318f524b5 27920 chromium_152.0.7977.82-1~deb13u1_source.buildinfo Files: efc2ed208d0eadbe369d31c4991693da 4406 web optional chromium_152.0.7977.82-1~deb13u1.dsc fbf43a24195afbf3b292c4317ce4d914 15496764 web optional chromium_152.0.7977.82.orig-pre-gen.tar.xz d6ecb436b35ce6416cbb79f234201215 959397088 web optional chromium_152.0.7977.82.orig.tar.xz 9554b7cfddacd4ae994fe25a87fab09a 556552 web optional chromium_152.0.7977.82-1~deb13u1.debian.tar.xz e4084553d93ed7ecafb4cbcee7494823 27920 web optional chromium_152.0.7977.82-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmqbaJMUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudje/4xAAjDvTBNZYyY721bqbzROhfY4FxHL3 lnfOdSsUFwQs7oS2gTA6kdwbIhGHLFHEK6BRq+2y4UAcjEv21fvOIjndqN176vT2 /gTXPqTUK8KyE3vxVlUhQ1mV1+AFsV+cmxjeqQ50aWR7hjYK6syFVtM1t0QFS7Yo pBAGn3h3Trh9+c2wLaPCk3hbYzu0S2wmePHFhoaFIl0/hCgnDow/9fz7q1i0glej SOQPQuG0vWnha7XHzErZZgnFgW6+Yfi8+RllK3WasCSALFR5Iu/50vLA95jyhAe7 KDYSqV9ymiq8TxxIXLCnSrsAcIK+W0kWg5c70YYw6OoZQwXS17MiXB9f3cwcX1c3 g/7gkDcHW1v0tN3xJZQRXGPMRXfhjoWFucQQ96WG07kr/zOy6ySmah9fE5O6WLmX LIdoNxh1yeaIIFlMqNyOudt1NRuueSDWDp95OXr1XSy/Ig5gZpLJebrv6IIxlbUy KfINO7hd7CvoUCYlhJ/+p4i5emnaV5b09sUIDYoPoe32OAKv3yOU7znayEPo7I4n ynRgw/eA68oBviYbTqQfJeucm04EXvOB7LT1doKE30dcLxJNlg/GI+rX+WO1cyCI MBDP+oajNoEkvSet6dKBLj8GoHS6oFIpEDJ9feJsxIx4IXttEAb9vXoI1G1Td4ls okvStDuZqAV2dn0= =DaLK -----END PGP SIGNATURE-----