-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 22 Aug 2026 13:45:57 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: arm64
Version: 151.0.7922.173-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Closes: 1124059 1145071
Changes:
 chromium (151.0.7922.173-1~deb13u1) trixie-security; urgency=high
 .
   * d/rules, d/control: switch to clang-22 now that it's also backported
     to stable and olstable (closes: #1124059).
   * d/patches:
     - llvm-19/static-assert.patch: drop, workaround no longer needed.
     - llvm-19/clang-19-crash.patch: drop, workaround no longer needed.
     - llvm-19/octal.patch: drop, workaround no longer needed.
     - llvm-19/value-or.patch: drop, workaround no longer needed.
     - llvm-19/clang19.patch: drop, workaround no longer needed.
     - llvm-19/iota.patch: drop, workaround no longer needed.
     - llvm-19/i18n-builder-enum.patch: drop, workaround no longer needed.
     - llvm-19/0001-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0002-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0003-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0004-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0005-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0007-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0008-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0009-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/0011-revert-v8-libm.patch: drop, workaround no longer needed.
     - llvm-19/privatefriends.patch: drop, workaround no longer needed.
     - llvm-19/constexpr.patch: drop, workaround no longer needed.
     - system/llvm.patch: add patch to remove dependencies on vendored llvm.
     - llvm-22/clang22.patch: add patch for unsupported compiler options.
     - llvm-19/clone-traits.patch -> llvm-22/clone-traits.patch.
     - llvm-19/const-profile.patch -> llvm-22/const-profile.patch.
     - llvm-19/keyfactory.patch -> llvm-22/keyfactory.patch.
     - llvm-19/raw-ref-map-find.patch -> llvm-22/raw-ref-map-find.patch.
     - ungoogled/disable-tos-dialog.patch: add patch from u-c to disable
       initial pop-up terms of service screen (closes: #1145071).
   * New upstream security release.
     - CVE-2026-76017: Use after free in Chromoting. Reported by Google.
     - CVE-2026-76018: Privilege elevation in Import. Reported by Google.
     - CVE-2026-76019: Incorrect authorization in Workers.
       Reported by Anonymous.
     - CVE-2026-76020: Race condition in V8.
       Reported by Salvatore Gulizia (nickname: Serotav).
     - CVE-2026-76021: Use after free in DOM.
       Reported by Google BigSleep@Grape.
     - CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro.
     - CVE-2026-76023: Improper resource control in Linux Toolkit Theming.
       Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research.
Checksums-Sha1:
 478278c94eac259f3d336d17028b3b18deb4c2db 5594908 chromium-common-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 7515bc8ad7277fac2793cf9c3999af97cf981159 34678452 chromium-common_151.0.7922.173-1~deb13u1_arm64.deb
 b0151e7468ab24bc84e4392d681a5ded5efafd4d 36173144 chromium-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 09693757ef8ca7db3b04925fb191899af2f812eb 7007316 chromium-driver_151.0.7922.173-1~deb13u1_arm64.deb
 021642992aeee9db4bb2b0fffe13c9283acb1f8c 30026668 chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 01710a85557916459f8db8d1c21031750096d4fd 57359368 chromium-headless-shell_151.0.7922.173-1~deb13u1_arm64.deb
 f6ae1563b69dfcb15153268f314697cad633fd69 20920 chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 e88e5b1911beb0c5f372190da8723ae8a910572d 139928 chromium-sandbox_151.0.7922.173-1~deb13u1_arm64.deb
 01b79b55b6033085cd03624e461c61bd7c61e34d 31560380 chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 bc2c4462fb2817f25bb0300f8a6c4f8b9b3b84e7 57245156 chromium-shell_151.0.7922.173-1~deb13u1_arm64.deb
 4479bed352512e430a2880722935cfa09753b3a9 31431 chromium_151.0.7922.173-1~deb13u1_arm64-buildd.buildinfo
 e2955cbd10a767a4fbf528311ee01c7e1635936f 77054416 chromium_151.0.7922.173-1~deb13u1_arm64.deb
Checksums-Sha256:
 0a78114d388c24dc2c13cceee3ed9e132cdab0cdee83ca7fc4a3e21000865805 5594908 chromium-common-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 11b206e11b4561bf5e589075fce434e8164541a8c94a84e465428b23a682f556 34678452 chromium-common_151.0.7922.173-1~deb13u1_arm64.deb
 8dd05c79eada89561ea9902d7356ada99fd9f129b29db5b319d339ee09ab690e 36173144 chromium-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 6be8dba8a2735e474368f9ad945da9c3bbd2f5350abb88bb34b79c8d01bd5ff9 7007316 chromium-driver_151.0.7922.173-1~deb13u1_arm64.deb
 9c794119a482df4b73e1e1bf797e3993bbfc91211e9a8ae3dfed12d1028ac79b 30026668 chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 f53835be2c85601484ae4dbec6a44b10fb7b20da4cf038b824a892257ee68f2f 57359368 chromium-headless-shell_151.0.7922.173-1~deb13u1_arm64.deb
 d05af512d4f5e28a41a1cde79c3998129811313affecf4d6351dd8344a3a96a8 20920 chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 5c9302438c3cebb9d9f02d9bdc1fb332b68da767eff3eeef849e9d9509df4731 139928 chromium-sandbox_151.0.7922.173-1~deb13u1_arm64.deb
 46390a742d1763f9adeeaddf9efe526fba553d47d4675253f7da81a06af05a4b 31560380 chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 cec3e1a3fd0ea823ae0f69b4b58b333a4da948ae8c41ffa424bad39dcb966b81 57245156 chromium-shell_151.0.7922.173-1~deb13u1_arm64.deb
 7ab194cff75d40e2a6a9f7189bf767670a610d58619a9723e3fb677259ac442e 31431 chromium_151.0.7922.173-1~deb13u1_arm64-buildd.buildinfo
 060685f016abd6ccace1ac95d6c3e0f872060164c49b76d0d46d42b860983f8b 77054416 chromium_151.0.7922.173-1~deb13u1_arm64.deb
Files:
 53d23e2e83a3ea06cb755427b49b68f6 5594908 debug optional chromium-common-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 ed8b659ea7f6f345feeb72988992c062 34678452 web optional chromium-common_151.0.7922.173-1~deb13u1_arm64.deb
 df90b6df29a46c7881487b2118f2a016 36173144 debug optional chromium-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 5921cf9242fb85cc73cadbae169da188 7007316 web optional chromium-driver_151.0.7922.173-1~deb13u1_arm64.deb
 f2a1ed6928bcb9392cf3bf93fd9acadb 30026668 debug optional chromium-headless-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 73daa6bedf42a50c0c139d37181daecb 57359368 web optional chromium-headless-shell_151.0.7922.173-1~deb13u1_arm64.deb
 15ee44e45eb1c1cdd62df198627bc7d2 20920 debug optional chromium-sandbox-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 403d890830b1be2fc10497dd56f0a668 139928 web optional chromium-sandbox_151.0.7922.173-1~deb13u1_arm64.deb
 e1f070b8e3ca9b4e4870aaaa86fd507c 31560380 debug optional chromium-shell-dbgsym_151.0.7922.173-1~deb13u1_arm64.deb
 7cae4c377a4a17be92b4a4f29497b14a 57245156 web optional chromium-shell_151.0.7922.173-1~deb13u1_arm64.deb
 a2114014bf4b59cf1fb608a339bd82b0 31431 web optional chromium_151.0.7922.173-1~deb13u1_arm64-buildd.buildinfo
 471532bf7cb5d5ec7e50d6f758274063 77054416 web optional chromium_151.0.7922.173-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=j6hW
-----END PGP SIGNATURE-----
