-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Mar 2026 21:26:56 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 146.0.7680.164-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (146.0.7680.164-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-4673: Heap buffer overflow in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse. - CVE-2026-4675: Heap buffer overflow in WebGL. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-4676: Use after free in Dawn. Reported by 86ac1f1587b71893ed2ad792cd7dde32. - CVE-2026-4677: Out of bounds read in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4678: Use after free in WebGPU. Reported by Google. - CVE-2026-4679: Integer overflow in Fonts. Reported by GF, Un3xploitable Of DeadSec. - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim. Checksums-Sha1: 9923c82dbf89ff4a2229a331e611f8d1f7983a82 5575788 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb a5acd7bcc89ccaf4baa9c331b97ab3ece7a46e7a 29157672 chromium-common_146.0.7680.164-1~deb13u1_armhf.deb 89d9b7bcad292707ade3fe7dccb3a02a74932b59 34898472 chromium-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 7bb027161240759706de31d2b799351d419d3cae 7100204 chromium-driver_146.0.7680.164-1~deb13u1_armhf.deb 7264a579c356cab12b38af0612c7219cc789c5a4 27340820 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 75e298052bb930b8187b632378708abb048ada88 53482604 chromium-headless-shell_146.0.7680.164-1~deb13u1_armhf.deb b229a27160bacf803c14aaf6eaf551c0c8bec557 19256 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb e6bcbca5ee3fe2c1b8515926f46c48321a519a73 111100 chromium-sandbox_146.0.7680.164-1~deb13u1_armhf.deb 1d226bde4adc6f390747ca2192fe3844f31538ad 29669032 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 463d71402acff8ca680de25a6b6e6a0ff4605690 58418596 chromium-shell_146.0.7680.164-1~deb13u1_armhf.deb 56dc95c063a533ff795169795745111bf37094bc 30272 chromium_146.0.7680.164-1~deb13u1_armhf-buildd.buildinfo 48dfba7615c53773068e3599ac2fbb0c27f5f840 69774832 chromium_146.0.7680.164-1~deb13u1_armhf.deb Checksums-Sha256: ec6742d3d1f50074facb4c9a125e23f56ac1f7150941ecc5ca78f7af8a2ea9a5 5575788 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb c89b84823493446c7dc21b1e48ddfcb2ef264f527a761ad5b4dcee2414de5665 29157672 chromium-common_146.0.7680.164-1~deb13u1_armhf.deb 88d461e6e252d98279c01b1909de6b3a327198cb97a8d1609cdcf60bbb98bd4c 34898472 chromium-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 92252df1ea4f0dd5dd7937d24022a2ee019888d05f18a168f6ec3c5792648d92 7100204 chromium-driver_146.0.7680.164-1~deb13u1_armhf.deb 33455ac1ed54df5b700980b9c7f60693ac0cb1387acdc061116f0598aa7aca42 27340820 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 503b5eda30ba5e6ee189d4f1ed147df051c20a51df9a3b677c73b2d4519a7b2a 53482604 chromium-headless-shell_146.0.7680.164-1~deb13u1_armhf.deb 2cb3044e71191a7c792392446e143e33ea8612e2bc75975ba4d0b60be84dd543 19256 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb f32ba5c00995574ed3ab2a58721e7c4127f379349b3bd360605b1ee96360e907 111100 chromium-sandbox_146.0.7680.164-1~deb13u1_armhf.deb 6c3b1491c2e30dc68a4ef39a34da5e04d1cd6d9c4c747ed179981d50f5687249 29669032 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 96a3cf3d134087b91d1e23ed9f381f9d3cf05b2d852c2ee03de502c9c0238e0c 58418596 chromium-shell_146.0.7680.164-1~deb13u1_armhf.deb 2ee0b6ffd5f35540542c8097de2512e5ae47c38201186c4688b47df59ee2fe69 30272 chromium_146.0.7680.164-1~deb13u1_armhf-buildd.buildinfo 211bc583d5f3082b9bb34790054547ea25991383932bc543d86147c5e25df54b 69774832 chromium_146.0.7680.164-1~deb13u1_armhf.deb Files: 9ddaf4a087aa7d49528cb9332f10ef41 5575788 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 6a9bb8824b6cc832806928094c227d41 29157672 web optional chromium-common_146.0.7680.164-1~deb13u1_armhf.deb a5abc87fc17c8ab004e16ebcf3ec4ca7 34898472 debug optional chromium-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 4f15e1a31afe29b7de756bf4a8315c43 7100204 web optional chromium-driver_146.0.7680.164-1~deb13u1_armhf.deb c89cc2438265e120892d0a1542ce1fe0 27340820 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 5bf91fa0a0c806204b7fbcbb8564334a 53482604 web optional chromium-headless-shell_146.0.7680.164-1~deb13u1_armhf.deb 3bdff0a6c8a37fdc5ac902d399decd66 19256 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb 4ce1eb46ed8d0540d25b211a68a9fb9c 111100 web optional chromium-sandbox_146.0.7680.164-1~deb13u1_armhf.deb 5e48cefd0ed681cdb987932ccb22e309 29669032 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_armhf.deb d7103cf80dd7f6b8f9773f8a1d665a71 58418596 web optional chromium-shell_146.0.7680.164-1~deb13u1_armhf.deb 035e945914835e31b69618f03f4c9d75 30272 web optional chromium_146.0.7680.164-1~deb13u1_armhf-buildd.buildinfo dfb6538096500b5c7c98a1992942b916 69774832 web optional chromium_146.0.7680.164-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmnDg2oACgkQOQKMdMnE H5PxZw//SY9vCL76n0mWr2/zRRjHVpQEKCWElnd/fEWqGhgswg180U7HYuNlzWy6 dd7hswu275iA5kFjFQ3GGs+96NWlSpj+T1hpoNygKkHu5wO9kQvQuq8FcAfjO6z5 6tj6xuLeELq1iqUR4KGPDffP9I9K7dt38ZUiAkZ/uN+kSDIa9UBGyB1Gm4DOWZvB LUEERUsojyGCBsDHatu7BZsYo9bXcdQ/2v/8/Oxn02bzXKtk6bQ7g4EWPWa67pbD cPpqFYhCJKy84P/PSxJyoNssfNRnJXbIg7xHLkTwznINvMzH7QIGCCbcT8Z1GZl6 2mutRM+QiJnAlVtItnYiPS4jcXZBgL4dcXUoQ5MnvvA734PsRJ74d0RMp86WvCjP 2k+3NawwOM9IgSQr11qxkcfNzf+ZjjgT29IoCwyRL/xWrg9TyK3/2X43UakpiLW5 P/WKcelQ3sBC0HAFexPqcRid2Qr1u93ZZYKJznSRFMRatdapvA8urq+0zN8bvdWz ta0yNoN8A7cOF1ed4ZT7uCbBu1ht1NvyRWw4GFmBimzMwCLVvghnhYPzT2zBWJws g1IoFO3QAMBGCw4w7mJaYZ+InSu5l5mu1h2njxfE+rMEAbreMB+0l/9TLTWqEGBm kEwk1OMD2XKnZoiGOpJH1CiMkWO/P78nacLPCb40E2CSyxG7I0g= =ESe0 -----END PGP SIGNATURE-----