-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: i386
Version: 146.0.7680.164-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (146.0.7680.164-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 73556a382986ee5a8c64ee1ca40a1e3301eec685 5182436 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 44533a518f4658d4a1ffb4eb02b05cff66ed125c 29364660 chromium-common_146.0.7680.164-1~deb13u1_i386.deb
 a439390cd4933f550f9ef812988730b32b548854 35586532 chromium-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 28b52b8b91fe39ba3d6b4ccefe8403c5c276fa3c 7779100 chromium-driver_146.0.7680.164-1~deb13u1_i386.deb
 6522683913ba66bf5f6ac1bb19f6b2e2dc958e51 29524248 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 6ba15bcd8d2ba4a759a423cb4f6a1967cf9c92e4 58152328 chromium-headless-shell_146.0.7680.164-1~deb13u1_i386.deb
 694742cc873685009bd8b3e8d2dc2e0cb82a2bc3 18980 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 4705bf2a4c15064dbc9f0236fe332602bac814e4 111332 chromium-sandbox_146.0.7680.164-1~deb13u1_i386.deb
 b801c19c488addd6cedb4be316c01191851941e7 32302540 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 466ddf940e157f2f53f73407cb5a968ebeb887a6 63387328 chromium-shell_146.0.7680.164-1~deb13u1_i386.deb
 3f669640142c64b15a56ebba77a6fbce2617efc8 30319 chromium_146.0.7680.164-1~deb13u1_i386-buildd.buildinfo
 b97c3580141301ff7036196f313646650c3141b8 75584488 chromium_146.0.7680.164-1~deb13u1_i386.deb
Checksums-Sha256:
 36f71cd99c8ef943eb8c08a0946a2057a49d856ebcda5b9c5092135eb6ee861d 5182436 chromium-common-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 2026b4b69fcd721e81e91bc69fb90912b8ab7b07dd896c2ecbf51b3742d984bd 29364660 chromium-common_146.0.7680.164-1~deb13u1_i386.deb
 86f4f6a74192f153bc46f10b866a6c365a2addd884566aea5c4ca121b54b086b 35586532 chromium-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 766958fe1bce55bb0e93578646ea2d3b3eab8d0034970d1100380891aeeae489 7779100 chromium-driver_146.0.7680.164-1~deb13u1_i386.deb
 64fa77444c4ea211f9c7036d2339a6b63442d147f30fae04909d281bd075bab0 29524248 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 58d20b9ba0496bd0835ba43f89b0b634aebb31b9a14a40b492c9308ed767287e 58152328 chromium-headless-shell_146.0.7680.164-1~deb13u1_i386.deb
 710730caf2714b5760099a2b4e1f7769cb21541746df2e57592f73ab1c0c8d4e 18980 chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 1df245a30c80f17dbc880ffaea95acee3129feb40ed69260033798a0efcf94f6 111332 chromium-sandbox_146.0.7680.164-1~deb13u1_i386.deb
 e59ac237e3c1cda7406d192388197a4f5b3fb547837632cbb607e17904c18fa8 32302540 chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 0a7ddea1831bcde09b0ac755f85b163065818ff16d511f7d6aab50ddaab23ee6 63387328 chromium-shell_146.0.7680.164-1~deb13u1_i386.deb
 b3c02973f6355d76fc060f827fc23c2b0915e196b595789eb53fe7db34b0a0dc 30319 chromium_146.0.7680.164-1~deb13u1_i386-buildd.buildinfo
 ee2c03cf986ee1c27b26397ee862fbbee80771ef144ffc9594323b90aae27b14 75584488 chromium_146.0.7680.164-1~deb13u1_i386.deb
Files:
 28906dcdd5eb6fc02adc31b712345c46 5182436 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 cefdaff476c8bf30c153659385b29da2 29364660 web optional chromium-common_146.0.7680.164-1~deb13u1_i386.deb
 a95c283770f7f7d73893f788bbbcfd49 35586532 debug optional chromium-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 0beb6278cd0516af6007d85135c02e35 7779100 web optional chromium-driver_146.0.7680.164-1~deb13u1_i386.deb
 c4111383136a9fd70ef2b030b6838d6a 29524248 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 08e5f78b642e574bd7445c47cf8b5404 58152328 web optional chromium-headless-shell_146.0.7680.164-1~deb13u1_i386.deb
 4578b23cb319c2aa4adeee07da46dfa7 18980 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 1f055cad6cac16c63ef59baac434a54f 111332 web optional chromium-sandbox_146.0.7680.164-1~deb13u1_i386.deb
 38778345e1fce1ec331c31abab0702d9 32302540 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb13u1_i386.deb
 e8a6cdd61ce3a713eaec7f4624de4cf9 63387328 web optional chromium-shell_146.0.7680.164-1~deb13u1_i386.deb
 04918e74559eea2881d9b6065b225e03 30319 web optional chromium_146.0.7680.164-1~deb13u1_i386-buildd.buildinfo
 eb7e7b850b24f27e57fe9e1d9f5a18b2 75584488 web optional chromium_146.0.7680.164-1~deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=9Qrh
-----END PGP SIGNATURE-----