Ungoogled Chromium 153.0.8010.36-1 has arrived, catching up with Google's latest Chromium base. The update expands its privacy defenses by tightening domain substitutions for new telemetry endpoints, blocking WebRTC IP leaks, and disabling Federated Identity Management alongside the ongoing Privacy Sandbox initiatives. Maintainer Ahrotahn handled the rapid commit and GPG-verified build, with dozens of patched privacy and fingerprinting protections intact. Users relying on the project should update immediately to close the security gap, especially if they depend on specific JIT toggles or extension flags that shift between builds.

Ungoogled Chromium 153.0.8010.36-1 drops with expanded privacy patches and a tight security refresh

Ungoogled Chromium just shipped version 153.0.8010.36-1. It is back-to-back turnaround tells you exactly what Google has been doing in the background. Security patches. Lots of them.

The project has never been shy about treating Chromium as a foundation rather than a finished product. Every base version lands stripped of telemetry hooks, trimmed of unnecessary network calls, and patched against the usual fingerprinting playbooks. This cycle continues that tradition. The commit log shows 67 files touched, with a net gain of 232 lines across the tree. If you need more storage, you'll have to look elsewhere, but if you need fewer ways for your browser to phone home, you're in the right place.

What changed under the hood

The most visible shift lives in domain_substitution.list. That file jumped by 149 added lines and 84 removed lines, meaning Google quietly introduced or reworked telemetry endpoints in base Chromium 153 and the Ungoogled team updated their blocklist to match. The patch set also got routine housekeeping from the bromite, Inox, and Iridium upstreams. RLZ tracking stays disabled. Safe browsing reporting gets stripped from the build. WebRTC logs no longer ship to Google's servers.

On the privacy side, the maintainers keep the fence well-maintained. Client Hints are blocked. WebGL renderer info gets spoofed. WebRTC IP handling defaults to prevent local network leaks. mDNS and service discovery stay off by default to avoid network fingerprinting. Federated Identity Management is disabled. JIT compilation can be toggled through a flag. And yes, the Privacy Sandbox initiatives, including FLoC and the Topics API, remain firmly in the blacklist.

There's also a handful of quality-of-life additions in the patches/extra directory. You'll find flags for custom new tab pages, tab hover cards, scrollable tabs, avatar button toggles, and even a switch to disable local history expiration. Some of these are brand new to the build matrix. Most are just re-tightened to match the newer base.

The release is available from Flathub.  Head here to download the source code.