-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 14 Mar 2026 22:15:19 -0400
Source: chromium
Architecture: source
Version: 146.0.7680.80-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (146.0.7680.80-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-3909: Out of bounds write in Skia.
Reported by Google Threat Analysis Group.
- CVE-2026-3910: Inappropriate implementation in V8.
Reported by Google Threat Analysis Group.
* d/patches/disable/glic.patch: drop an unnecessary pieces of the patch.
Checksums-Sha1:
a71472783c33620c279780f574f1059537364667 4058 chromium_146.0.7680.80-1.dsc
dfdb7ac355d070e236c27d9dcb31bd9a4edee686 786503132 chromium_146.0.7680.80.orig.tar.xz
bd86a4eeb04669bc6faa68a871e9e92e10767409 465196 chromium_146.0.7680.80-1.debian.tar.xz
2447e953225d4ea606badf1bfbc6d240d4fef629 27894 chromium_146.0.7680.80-1_source.buildinfo
Checksums-Sha256:
754c074a9b194b0fe2bec9e76fe0dd59762aa18ac5cff82934432efe87d0049e 4058 chromium_146.0.7680.80-1.dsc
ca3a1d273219d9fe614b0a7aadedb172fafbf02ff516f12fa9cf27d5e9a24cf4 786503132 chromium_146.0.7680.80.orig.tar.xz
f0f73842248166716307ebd3dd5ed6e90a7e28142990900b27157003edc93d9e 465196 chromium_146.0.7680.80-1.debian.tar.xz
8166f6997cf5be9d5452f539752428b39452045191f6abffee20793851eeea74 27894 chromium_146.0.7680.80-1_source.buildinfo
Files:
ac92b19fca66f7c4486e714ebf58c052 4058 web optional chromium_146.0.7680.80-1.dsc
c6df2da276c9b905b14be76ad79f9124 786503132 web optional chromium_146.0.7680.80.orig.tar.xz
808309c070461a0e29a66470b78b3752 465196 web optional chromium_146.0.7680.80-1.debian.tar.xz
1ffad24c1dba73c2ae244b28c0f1c4b9 27894 web optional chromium_146.0.7680.80-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=g2yk
-----END PGP SIGNATURE-----
