-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 25 Feb 2026 22:14:31 -0500
Source: chromium
Architecture: source
Version: 145.0.7632.116-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (145.0.7632.116-1) unstable; urgency=high
.
* New upstream security release.
- CVE-2026-3061: Out of bounds read in Media. Reported by Luke Francis.
- CVE-2026-3062: Out of bounds read and write in Tint.
Reported by cinzinga.
- CVE-2026-3063: Inappropriate implementation in DevTools.
Reported by M. Fauzan Wijaya (Gh05t666nero).
* d/rules: drop CVE check for security-uploads (no functional change).
* d/patches/disable/glic.patch: add a patch to fix build with disabled
Gemini Live in Chrome (glic).
Checksums-Sha1:
96ebe35b11ac1a14693d2a9c513f9efe2d4cec9d 4079 chromium_145.0.7632.116-1.dsc
9177691d8684c0859b162e154a1990608eaa558a 748033980 chromium_145.0.7632.116.orig.tar.xz
25331f95e7b840e04de7ef4a1d6f23ef1764e6d3 455960 chromium_145.0.7632.116-1.debian.tar.xz
5b53a0de815a2528e43524f4e9dcbf3c56804e1a 27648 chromium_145.0.7632.116-1_source.buildinfo
Checksums-Sha256:
5da1e972a23de403e25c588c3c4ffbbd00142bee6de79cba1da1bbae461e8d63 4079 chromium_145.0.7632.116-1.dsc
58bd99c3ce7cccf2a80f6136499a0db578eca5652c9832f0e31bec53d899f0ed 748033980 chromium_145.0.7632.116.orig.tar.xz
8e52d5fb7e823245c60b09b35c6d74e0138aa366ad3f60c2ae1d9ed3b153931f 455960 chromium_145.0.7632.116-1.debian.tar.xz
c83347661c3063524b2f1556c0de2bd51446e23b847849d1f15323dd25b6352c 27648 chromium_145.0.7632.116-1_source.buildinfo
Files:
2bb0f7cebaf94208e33d4342188763fd 4079 web optional chromium_145.0.7632.116-1.dsc
e9e1057a1b384dd1e42d47136c2dc305 748033980 web optional chromium_145.0.7632.116.orig.tar.xz
3c2d2d32d60b8eb66f3fe7aaf2b240d8 455960 web optional chromium_145.0.7632.116-1.debian.tar.xz
9bea11f1ab0ce453ba1d1b00f71cea3f 27648 web optional chromium_145.0.7632.116-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=4UaG
-----END PGP SIGNATURE-----
