-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: amd64
Version: 146.0.7680.164-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (146.0.7680.164-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 7c53c43b871180c33d1135986bf8367001a28c6a 5113460 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 caaad5288b72732af7308c707acc0dfa5f4c5774 29229364 chromium-common_146.0.7680.164-1~deb13u1_amd64.deb
 994d51d2d5fd485b4e5d23319c0ec8ec0fbdadb2 33010928 chromium-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 621e5c898187f9c7190e025e8e0dfb28aa3cae6c 7354268 chromium-driver_146.0.7680.164-1~deb13u1_amd64.deb
 a5bb5016cc4ed14803717ad55630d0a4259c0939 28073628 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 ee1aff7bb70356590e547647844442d59a8f505c 61339784 chromium-headless-shell_146.0.7680.164-1~deb13u1_amd64.deb
 a9dc8421c4084acca1fa4c503826edd6471b04ac 20224 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 15b3edb701b08614596009e28fe99e4b0c847b54 111440 chromium-sandbox_146.0.7680.164-1~deb13u1_amd64.deb
 641d6f0f326b4fe06fc15ebee1a9091922930687 29465168 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 ff3db59e2cca94ed549d7682a592e7e7b7a1e54d 60766740 chromium-shell_146.0.7680.164-1~deb13u1_amd64.deb
 30a20bb037cb9e6f5595e6995058ebffa3dfc79f 30397 chromium_146.0.7680.164-1~deb13u1_amd64-buildd.buildinfo
 50e3f3513632ed5aec7f0d9430cad74f7292cf98 82449892 chromium_146.0.7680.164-1~deb13u1_amd64.deb
Checksums-Sha256:
 2255eeaf24ea20265c84f189f03371b87c89ea1b6e69e88893db9cb6d470db0e 5113460 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 49870b90692440fe2d831bd3e50155c8f2efd5e079241e8db93fa11ca3a7b00f 29229364 chromium-common_146.0.7680.164-1~deb13u1_amd64.deb
 9eda3c5fc5198e4cd9632b7e3b844bf2225ad7ce5586e138bcce0757938e8f18 33010928 chromium-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 e519841d174d40aaf3bc7a78c2fb5756c97b0c5941cf7579fbbcd62597909801 7354268 chromium-driver_146.0.7680.164-1~deb13u1_amd64.deb
 7ab7ccc1d20abe6bd04ed93004f81b76e6ddb7b93b1c7738fa2befbc00840ae3 28073628 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 893b1a48db4a006e6b7a7be2d33acd76e55f50a1fea0ddd49b637b3d1b6ae278 61339784 chromium-headless-shell_146.0.7680.164-1~deb13u1_amd64.deb
 2c37b04363229adaa971a965c23471d1c0c1d2e9af3c5b5d6716b95145a0c04d 20224 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 82b3e66e1c96a61580a4e455a61a868cf63455b7018e4f419d1522d5f6e7e7e6 111440 chromium-sandbox_146.0.7680.164-1~deb13u1_amd64.deb
 c2e6ccbb13847e026249943ba954bf1e36845a2c00d0e06a6c813cc8ea011ebb 29465168 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 f1beb4a850120d243ea810a1bd2dcf55e97627c9f95d290da0fe98a92f883e9a 60766740 chromium-shell_146.0.7680.164-1~deb13u1_amd64.deb
 d42b21e198bc4caece845c59fb4ecf156f6c914ece6b6e91e4b85f46dcf42513 30397 chromium_146.0.7680.164-1~deb13u1_amd64-buildd.buildinfo
 e1bea34f2fd05af342b156e8b3a856c88fc9b342a7380d4733b2e91f836f2e44 82449892 chromium_146.0.7680.164-1~deb13u1_amd64.deb
Files:
 63f12605a3a26809020debabbf9ee134 5113460 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 2fb88b85eb91576d6f32fec031ac5c93 29229364 web optional chromium-common_146.0.7680.164-1~deb13u1_amd64.deb
 f318d5c2e7181ee47accd2518d7c8c81 33010928 debug optional chromium-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 495181d4e23779f51e78a4703f276d7f 7354268 web optional chromium-driver_146.0.7680.164-1~deb13u1_amd64.deb
 bc28654b542cea6af25f8a532ae64e72 28073628 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 3159f334d183098d2ef60a1356b5cce8 61339784 web optional chromium-headless-shell_146.0.7680.164-1~deb13u1_amd64.deb
 a3298a38519d3739aa386bfe9d78ec22 20224 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 74e7d48cd8a5d1f097934a1e388234d2 111440 web optional chromium-sandbox_146.0.7680.164-1~deb13u1_amd64.deb
 4cb64873d5767e7a8609618b332631d2 29465168 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_amd64.deb
 1a192bc9c30951491ea7a1bcd9c32236 60766740 web optional chromium-shell_146.0.7680.164-1~deb13u1_amd64.deb
 d8088a2c9a1fe430986fdfec3439b6af 30397 web optional chromium_146.0.7680.164-1~deb13u1_amd64-buildd.buildinfo
 1262253601b9842d635291f170348c64 82449892 web optional chromium_146.0.7680.164-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=Ki4P
-----END PGP SIGNATURE-----