-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: arm64
Version: 146.0.7680.164-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (146.0.7680.164-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 46c342ef93b286d119c54c011af70a0c032b4ff3 6074048 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 7199ed1f54ae20b70ce90c4a941b8f805e0b6c1f 33870080 chromium-common_146.0.7680.164-1~deb13u1_arm64.deb
 049ef9ffc6e5377bb980d2aa34f4371f744609e5 33590912 chromium-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 66b2dac49125e54af5f244d5203613e92631afc9 6530208 chromium-driver_146.0.7680.164-1~deb13u1_arm64.deb
 b018397f503477d60504068c5991bbfba3d6c6b7 28023760 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 def10e967df2a3abb4573a00615ae251346241a0 53463056 chromium-headless-shell_146.0.7680.164-1~deb13u1_arm64.deb
 b99cb0914e438e606f84b52c2750deec5045963f 21088 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 d5efb98ae7e86f4a9ba46a60b18141bf22473d54 112236 chromium-sandbox_146.0.7680.164-1~deb13u1_arm64.deb
 6b7c92f29d1ed04199359720591d4b5204205824 29284056 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 bfbd7345e38796fed67b5675dc3e0d31d6bfd78d 53123008 chromium-shell_146.0.7680.164-1~deb13u1_arm64.deb
 48dd8acb65c67f8bffea600c97f7f204c68cb834 30366 chromium_146.0.7680.164-1~deb13u1_arm64-buildd.buildinfo
 03798cadc9b9c75f3e84f2ddf84bec4766a9de18 71034488 chromium_146.0.7680.164-1~deb13u1_arm64.deb
Checksums-Sha256:
 7f64209fed03ff9419839f26cfb8fefd4a4dd9e9c7e562c7ee13d0bf4cd599dc 6074048 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 5719de6ed90238e30b86197700981c09c768adadbe593d64073a0199cbca0b24 33870080 chromium-common_146.0.7680.164-1~deb13u1_arm64.deb
 78760c59c7ff14170cbb9b6597751c864233d3c7c66702745dc4f9a614c149ba 33590912 chromium-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 37c568dbbbb6b25d5e220d6f0659eea95638b6d83b0c6edb5835a64ed37c3242 6530208 chromium-driver_146.0.7680.164-1~deb13u1_arm64.deb
 e097dc195816175ace98ce709a858cf4dcef8a4109a0a27cbbd5165ee2229208 28023760 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 1268166bf599fbe659027992ddc471b1606debb3a444ba1c8c43bfde7c63fe97 53463056 chromium-headless-shell_146.0.7680.164-1~deb13u1_arm64.deb
 462609addf9ada094118f9b6d2f701179b4a77c897005dea35b15de3d7ddb1cf 21088 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 1f2796ad0563da3d26e6e655dca76f01cc54535ab151c9166443b4b4bc2fafcf 112236 chromium-sandbox_146.0.7680.164-1~deb13u1_arm64.deb
 a402d194ac30457b3b3bfbe28bb282d1d6e77bb474b98de443bc78ed9d6ce86d 29284056 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 acbb0508aaece2ba58b00273a98b49a334a231f343844bee8b6df1f2b8a1604f 53123008 chromium-shell_146.0.7680.164-1~deb13u1_arm64.deb
 ea6585d2bf1b90c705910e166ed5aa85d73985f486e11fcde4cfb96b5f7213a2 30366 chromium_146.0.7680.164-1~deb13u1_arm64-buildd.buildinfo
 8d7537d732d15555abc4ff034489a65db3a97b752343fe6329dbeef8aee9ae93 71034488 chromium_146.0.7680.164-1~deb13u1_arm64.deb
Files:
 a3709eda8b4bedc639ae731cdbfeb0c5 6074048 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 1cefbbf0153ae072c0be570854d8b3f4 33870080 web optional chromium-common_146.0.7680.164-1~deb13u1_arm64.deb
 983800ffba733f728767f1c4890ab77b 33590912 debug optional chromium-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 c704605084efa944c4cff658b6dd212b 6530208 web optional chromium-driver_146.0.7680.164-1~deb13u1_arm64.deb
 3797970a7a2e9a43a1f3ea7ddf1b0bd0 28023760 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 4f2e0e4aac9ae64c9d7f1aa5ec49ba41 53463056 web optional chromium-headless-shell_146.0.7680.164-1~deb13u1_arm64.deb
 5cfca7c76b010c0418d57a489c40fd44 21088 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 6c940d7c5ac51afbe4bbf1e6df108ba1 112236 web optional chromium-sandbox_146.0.7680.164-1~deb13u1_arm64.deb
 d12e3b8caab4a0c059d11410af0c73d4 29284056 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_arm64.deb
 45d5ef65ee1f2a7e6675a21929bb9c2b 53123008 web optional chromium-shell_146.0.7680.164-1~deb13u1_arm64.deb
 e55b3d87b360219eae6db65363979ec1 30366 web optional chromium_146.0.7680.164-1~deb13u1_arm64-buildd.buildinfo
 c6addd9fadfd9efa2205802d0d1813eb 71034488 web optional chromium_146.0.7680.164-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmnDj2IACgkQVza3l394
K2B6XA//TraoWw7CCyDAyL0utJuqpD4ACfz1vkbJei+QqK3LHAl6I6OzL153C6+t
buHk9gzuP2n9CoETkFOrxt4wnAY13sfdZKtU98Y6KuK2fF0981hza+VnVBs2u94/
U788Kawcv8HiP+y8Y6QWoSWMMxwsGxIG2VWCIwCtlowQxs7oOrKqjfXyK8q/oQLH
Wuzfq8v71mNRrbWFViHEZnQOAmKllRYxIdUPmomhkSS+gmdj5jA2Iz2dwszu/sjq
mLIff5DlBu2PAdDlyBjquV8R38rQuT/PSWKo29BrFgk2QkWvXk9b8UWPORhS6QRf
jNup1D4C+4l1IKu3mtneUo0MjBeChV87I+UbAkxyo47RbPGF7c2zW92k3tIiifTM
t7ecV9T6N8izzqX8MZWt+EYeqmRxYq4AakaoetOV0ub/psAxCmZsrSejoDSurzkZ
6gc3ecJrz4ukcd3HfmUCQI/hABsvBPUgiy7JVXZ1kBX/0w6HtwE4LfweYfA2xxUj
ak1UGfuUI6ER/HxY0BCmm4AgHR6owYcRkIlyvhLA/TRGq+yKIFpzYlTFZZtzkD5W
SE2hPEoIgFGr5+wXT/9keaC5DGj6MLnCGqggAZdiPyKlTrY573Xc43fhG7D5dj3u
vIYukjHKPspteI/aobMGtCbU0oIHYo5NtLBrf2llUD/QkkWN9eI=
=r1Xu
-----END PGP SIGNATURE-----