-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Aug 2026 13:45:57 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 151.0.7922.173-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1124059 1145071 Changes: chromium (151.0.7922.173-1~deb13u1) trixie-security; urgency=high . * d/rules, d/control: switch to clang-22 now that it's also backported to stable and olstable (closes: #1124059). * d/patches: - llvm-19/static-assert.patch: drop, workaround no longer needed. - llvm-19/clang-19-crash.patch: drop, workaround no longer needed. - llvm-19/octal.patch: drop, workaround no longer needed. - llvm-19/value-or.patch: drop, workaround no longer needed. - llvm-19/clang19.patch: drop, workaround no longer needed. - llvm-19/iota.patch: drop, workaround no longer needed. - llvm-19/i18n-builder-enum.patch: drop, workaround no longer needed. - llvm-19/0001-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0002-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0003-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0004-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0005-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0007-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0008-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0009-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/0011-revert-v8-libm.patch: drop, workaround no longer needed. - llvm-19/privatefriends.patch: drop, workaround no longer needed. - llvm-19/constexpr.patch: drop, workaround no longer needed. - system/llvm.patch: add patch to remove dependencies on vendored llvm. - llvm-22/clang22.patch: add patch for unsupported compiler options. - llvm-19/clone-traits.patch -> llvm-22/clone-traits.patch. - llvm-19/const-profile.patch -> llvm-22/const-profile.patch. - llvm-19/keyfactory.patch -> llvm-22/keyfactory.patch. - llvm-19/raw-ref-map-find.patch -> llvm-22/raw-ref-map-find.patch. - ungoogled/disable-tos-dialog.patch: add patch from u-c to disable initial pop-up terms of service screen (closes: #1145071). * New upstream security release. - CVE-2026-76017: Use after free in Chromoting. Reported by Google. - CVE-2026-76018: Privilege elevation in Import. Reported by Google. - CVE-2026-76019: Incorrect authorization in Workers. Reported by Anonymous. - CVE-2026-76020: Race condition in V8. Reported by Salvatore Gulizia (nickname: Serotav). - CVE-2026-76021: Use after free in DOM. Reported by Google BigSleep@Grape. - CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro. - CVE-2026-76023: Improper resource control in Linux Toolkit Theming. Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research. Checksums-Sha1: e48d75b7391eb9809bdbb55eb79a683407d2f6ba 4753340 chromium-common-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 489b36b547e4b234c244ce5e00f2060cd8ff2ea6 29629900 chromium-common_151.0.7922.173-1~deb13u1_amd64.deb cd75acc752063d064aa3232e69942e241abb3e3e 34516380 chromium-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 003837cc0132c207304fd442c27365f95be499d5 7980136 chromium-driver_151.0.7922.173-1~deb13u1_amd64.deb 20795d8c9631438be01d5daf260de5827024041e 29070952 chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 974113b2cac1332024413e0963bafa74a11dba0a 65695208 chromium-headless-shell_151.0.7922.173-1~deb13u1_amd64.deb f0bab8588125cac5325b9a66897f14194c32a65b 20252 chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 997f427e3284b40563f41db88445bf2dabbbad82 139248 chromium-sandbox_151.0.7922.173-1~deb13u1_amd64.deb 195e983db019eb341d6f1bea00a793f785d466e1 30778268 chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 1fa2fc8460f5e6b3851806e481d01d56e09f223d 65050348 chromium-shell_151.0.7922.173-1~deb13u1_amd64.deb ec8518e2171c99639653d30d4cb8b0f29d8de05d 31393 chromium_151.0.7922.173-1~deb13u1_amd64-buildd.buildinfo bc53d5c03ee78ed1e5713dda17d89faf75a5f3ce 89011004 chromium_151.0.7922.173-1~deb13u1_amd64.deb Checksums-Sha256: ea91baa6878bf285b207bab66284935a2e68e94d6cee8a2f857c148e0c549463 4753340 chromium-common-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 9d7f417c4b93250dcc5b0b4b2fe00554ea17d895876418d95625512993c6a7c6 29629900 chromium-common_151.0.7922.173-1~deb13u1_amd64.deb 55f828ca483f52cd7278fa8b2f53389a67740e3e087b7e00c92a5056b5880aac 34516380 chromium-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 3d7584fda240a13deba903e9d7682ae5c125edecb1000ca9a8cbde31b631f9e2 7980136 chromium-driver_151.0.7922.173-1~deb13u1_amd64.deb 694534278e2f8f1e2e652306c06b0cbb97c7d2bc48178c5a1aab35769e59f8b3 29070952 chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb f5336b4c9c8f0f3dbf9d0f2ab9a35936b2edaa57c40fc1578d1e5346093cf3a5 65695208 chromium-headless-shell_151.0.7922.173-1~deb13u1_amd64.deb 30fadbeb841cda03485668081c9327124ca8df05ca6413f76ae8a96369ba821e 20252 chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 1e4227f7968e5d2962ddfecea2751e94260a0aaa149d5fc29d1e855251c5e028 139248 chromium-sandbox_151.0.7922.173-1~deb13u1_amd64.deb 791c8a64efd85f73cdf83cfd21472a4ce4454b487431b9f86912834c00c818eb 30778268 chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 776088ddd35ca25fecaf83ff65c743e8b3cf1e25f35ac87e6f82ef4a798d7442 65050348 chromium-shell_151.0.7922.173-1~deb13u1_amd64.deb 3e6ba9b48d12319bcafcfe125d6b33bf2e3e164c12ed9766ef2bb220754ae9c3 31393 chromium_151.0.7922.173-1~deb13u1_amd64-buildd.buildinfo d2b032546bd986899cf6edbd9eba9ac245f530446a1177c639b4ac8000da34da 89011004 chromium_151.0.7922.173-1~deb13u1_amd64.deb Files: 7ec3e295079907e4f61548814b8d85f0 4753340 debug optional chromium-common-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 48c8e135f38348b269ea5042d7696d18 29629900 web optional chromium-common_151.0.7922.173-1~deb13u1_amd64.deb 5518d02e71ee34923aecb1f151677ecb 34516380 debug optional chromium-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 6824f69366d9f2377c529b6383dfce29 7980136 web optional chromium-driver_151.0.7922.173-1~deb13u1_amd64.deb 7d8c07b92854a305b16ba02bdde82e5a 29070952 debug optional chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb ba78ad7f9c058ffa32e594acab4be892 65695208 web optional chromium-headless-shell_151.0.7922.173-1~deb13u1_amd64.deb da8e0773b9891e60215b6a20890fba2a 20252 debug optional chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb ffb2ad3812a0fc1d2cd89103dec5522e 139248 web optional chromium-sandbox_151.0.7922.173-1~deb13u1_amd64.deb 72f0bba00f8eeb1d2b0c8a87da41d2d7 30778268 debug optional chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_amd64.deb 700293b2942807c91956d30b77246dd2 65050348 web optional chromium-shell_151.0.7922.173-1~deb13u1_amd64.deb 160dfb8dd760fe7fda6683eb41ffbcfe 31393 web optional chromium_151.0.7922.173-1~deb13u1_amd64-buildd.buildinfo 45c6875a04b3f5abcb73f4991a0900ff 89011004 web optional chromium_151.0.7922.173-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmqQK2oACgkQf2INRiCd aWKAKg/7B+xsXkAcKUIQFvIUr3TPg9WSC4WegJblpIUpgbbeqNBceKRYBuyVPmaW oUXSnRrz0D2jQcTFjV0nWaCQVdqHugUHlgABbBGv5VTJSSZRZ569GTZnxwfDnPU7 woXbSvDB1UHyLCVem58RFQ9vHWpAh0K3bkpOB54yseIqU6EK40WSrkPyaGqLiPWD uV+OwXu5JmAYv98oVY5r4WbjQAFf4wsH+0vwMqtticVgUKET1c1U0gWLpzEH1O06 eNZJluwy8844lvkW2f7Tr/JjCr+Otbg9KNUvooxvY72s53miwNz3YQWeo+rrWZYf Q5W0PNyfOhgCELH/J4D/enQiDxem+kMtfkMApZrD5PehS5TebpmXVttfLmASdGOE yaJ8v6fWVSLAgtP4tWJJkQ4gVrVtZXpsAD4v2lP3lPoVVRSidARMG0btc1d6r4ex ArmneDIJ+EmuCZKCCiuFDt/cfI9S55XJSt8FRXjCa9qC4VKvl1sYrTWhHuwtPDqb HZ0vsoxapWH58OrDt0FrY7Kf1VJN0r+78CDioFGAWsMTbx2OlSZiZkrTezMSic26 BIz0hBQmcEZcbzmHLpaqFtJIOyJ6FfMG/KLqzHyhMYM5ksPIy21TdsXGeBoRpqmQ pO0PH0Zcr2T59Ybw2td1nwXJL+GZ4twwp75/zefkvDMbH7QIWmk= =Wgv+ -----END PGP SIGNATURE-----