-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Mar 2026 21:26:56 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 146.0.7680.164-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (146.0.7680.164-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-4673: Heap buffer overflow in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse. - CVE-2026-4675: Heap buffer overflow in WebGL. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-4676: Use after free in Dawn. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-4677: Out of bounds read in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4678: Use after free in WebGPU. Reported by Google. - CVE-2026-4679: Integer overflow in Fonts. Reported by GF, Un3xploitable Of DeadSec. - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim. Checksums-Sha1: 133bff3173cc9096e6d17d3ff39a218457b0bf8a 5576056 chromium-common-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 8646e06d3540d40876c3d7ba1cac04de625270fd 29176096 chromium-common_146.0.7680.164-1~deb12u1_armhf.deb ab4bb8102b0e5ac8db91715bf17e1463698a573c 34869796 chromium-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 9e23ebc74cd0091f7733c778330293064fe27800 7101312 chromium-driver_146.0.7680.164-1~deb12u1_armhf.deb 135ffd68764ee8d3346e2a758a87a26def9f869a 27316980 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb fde4bca2e7f2fc014528a03ef7686ec49f8b928f 53501712 chromium-headless-shell_146.0.7680.164-1~deb12u1_armhf.deb 0720a0ddc80e36c98f649e252fca94920af9e7ba 18008 chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 1f65f2ebe9d3f8fe144708fdd40572b088cd313c 113300 chromium-sandbox_146.0.7680.164-1~deb12u1_armhf.deb a23104c2d9ab46d9078068a36df10aa39739561e 29628764 chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 9b0b84975dcc387ded5c11430aeec4af86c42fe0 58420064 chromium-shell_146.0.7680.164-1~deb12u1_armhf.deb de1a9bd27cbdf2a0c95d59f43668b0baec059fec 30297 chromium_146.0.7680.164-1~deb12u1_armhf-buildd.buildinfo 77d3d89033467be7b82fe729eb21fd3536729110 69766768 chromium_146.0.7680.164-1~deb12u1_armhf.deb Checksums-Sha256: a91fdb0bfeaaf95978c65ff9300b0a1b6ad96ac38386d96421f5e5aab5317e96 5576056 chromium-common-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb fade5969ce6c3d320f935a93e3d0052595243ec79ea85ef5f4f94f696ef77612 29176096 chromium-common_146.0.7680.164-1~deb12u1_armhf.deb 8d67bea904476d1c4b1147559fb0e45a3e076f312efccc7d0276430b990c5203 34869796 chromium-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb c562268dcc4d6959bd19c1ad98d98fcf5108641c72ffa32010da3365a51708f1 7101312 chromium-driver_146.0.7680.164-1~deb12u1_armhf.deb 1c0fa417300899a5fefd9df6add0b3a33edfe734ce1549e997420bdef87e854c 27316980 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb a35303f7097b286694450fa124580dc03f4d76b420f3759ccbf34849a8cf2858 53501712 chromium-headless-shell_146.0.7680.164-1~deb12u1_armhf.deb a89ccbe51ba19b05981ae09827d6eb39d3a060b6c39bb842af804391e15b0df5 18008 chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb faae1fdfecaccfe018140651f3ce04cf266f412b516b6f53c02b2aecc1c899fd 113300 chromium-sandbox_146.0.7680.164-1~deb12u1_armhf.deb bacb2ddf1739fae95eca1684160c121ef49949e3839ed884262426ab501993f4 29628764 chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb b06c816dd2f1bcad3d619023f7821c9cdeaf0806cac09a77da9c775ab187297d 58420064 chromium-shell_146.0.7680.164-1~deb12u1_armhf.deb 7dee4089e6e444b3865250594c19128e7a97fff77806df66edb6e98be5dca869 30297 chromium_146.0.7680.164-1~deb12u1_armhf-buildd.buildinfo 53059826a73cf3b5b4c8a2430bbdc266545e227f92f8ea8dcbdbe923d968f8ea 69766768 chromium_146.0.7680.164-1~deb12u1_armhf.deb Files: 681b3a504ae35aba683db98313c489cc 5576056 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 7d632e18d7f539cf832278dd2708997f 29176096 web optional chromium-common_146.0.7680.164-1~deb12u1_armhf.deb ba2b0af8db05689d12c4c923f2de8e93 34869796 debug optional chromium-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb f662d919f3c1547c68f64c940ede09b6 7101312 web optional chromium-driver_146.0.7680.164-1~deb12u1_armhf.deb 08602bf0460fb3734e05a98165f330e4 27316980 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb bcee48df71d3ae6d9cf41280e24568e9 53501712 web optional chromium-headless-shell_146.0.7680.164-1~deb12u1_armhf.deb 5ba215c33fbf0119321db25e04f507d2 18008 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb 11d0eb44e5c3da0c4eb9fd8f75f87be3 113300 web optional chromium-sandbox_146.0.7680.164-1~deb12u1_armhf.deb 410d5160b82fe3343b8630198f8c91eb 29628764 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_armhf.deb cdc170a6cd2a9cc59e58f498b853f508 58420064 web optional chromium-shell_146.0.7680.164-1~deb12u1_armhf.deb 2139fa00bdac731aaeb617558209022a 30297 web optional chromium_146.0.7680.164-1~deb12u1_armhf-buildd.buildinfo 2c89fb5456678e0400d0eed5ac1fe457 69766768 web optional chromium_146.0.7680.164-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmnDmAoACgkQCr/D/stJ kDxLbg/+NN3Lu+8SYLxPH/J0nD6kNy2/xTDd5yZRcb+gaLYk/xVTcQQCsjrkh3f0 DvubTvAETb/qhYUixHpZ12Z9+Ko5SGS8VDU4dY7Gtj1OCWhJCsE8S4ESui9nwPv1 gGNHSGetBF6qrhNoITCPEMn+SxPyTUVWI269cuyJSvziBhYCG4i2UI119RRgMlHH NGf48kpGYYB7HmRbJmojoc6/90QXP+5HbAUAjTMXJeyBLBwfMDOntfeU0jtbw8Jw Ga/37gyD9EJJ4bvh0lYAL5vrdvQ9ub7b2WSgLl0UkEjBILfIqcVurYDRyRJCnGx7 F5mxNI368E1sdTEbWYEI8bGTyUEhrwJS1fPUWV0o/oIodk5jE11+VH1dlUWcN3Mr iGUS0JGahen1ASYzgraBYCNV+9j9O5F3ckCgrOJb5kntN3atjc2C3tpfaLcOimwM plf+gOji/+NyuWsgDaowGWbK49OEy7/lDXOMrmMF8aCH3gaZtNA04qKfoR9U9du3 ZglA7r+pBt5rWb8hQp+vzjQ3+mdqbRQxy05HaIxDmAbdx4UP13eJmnJIY74DN7kY HbgZla7/39QJVltXkjstKKKfFf+Uv6aEJUZn5Swl1DpiWhllu4EkOPguuWnck0sR Lrev0Oiymb8/yL7uzQccvpI+rHhNjZ4EClTE66zsTwxDYYkJb/E= =sr/l -----END PGP SIGNATURE-----