-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 14 Mar 2026 22:15:19 -0400
Source: chromium
Architecture: source
Version: 146.0.7680.80-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (146.0.7680.80-1~deb13u1) trixie-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-3909: Out of bounds write in Skia.
Reported by Google Threat Analysis Group.
- CVE-2026-3910: Inappropriate implementation in V8.
Reported by Google Threat Analysis Group.
* d/patches/disable/glic.patch: drop an unnecessary pieces of the patch.
Checksums-Sha1:
15f9a3644786f6fcf531a61f85fba4f7069007d9 4092 chromium_146.0.7680.80-1~deb13u1.dsc
dfdb7ac355d070e236c27d9dcb31bd9a4edee686 786503132 chromium_146.0.7680.80.orig.tar.xz
c3b77596db6c570584a1bdb8ac0224055856546a 465992 chromium_146.0.7680.80-1~deb13u1.debian.tar.xz
6afd8c84a9748afebf82f37a78b354d40567ea28 26797 chromium_146.0.7680.80-1~deb13u1_source.buildinfo
Checksums-Sha256:
469d469f3f846c4f6068c8ae1784519a8ad134acf3c92c4234a3b392c8e22611 4092 chromium_146.0.7680.80-1~deb13u1.dsc
ca3a1d273219d9fe614b0a7aadedb172fafbf02ff516f12fa9cf27d5e9a24cf4 786503132 chromium_146.0.7680.80.orig.tar.xz
af0c54ee237bc9d31643ba92fa864623fbe5c5d033daec887b53ed7d815519ce 465992 chromium_146.0.7680.80-1~deb13u1.debian.tar.xz
535297bc7c1d9ea6387f2eb6fd0fadc58a326b922c804bc873912f63ce65202d 26797 chromium_146.0.7680.80-1~deb13u1_source.buildinfo
Files:
607040cc54781c4abb96ad9405770453 4092 web optional chromium_146.0.7680.80-1~deb13u1.dsc
c6df2da276c9b905b14be76ad79f9124 786503132 web optional chromium_146.0.7680.80.orig.tar.xz
704a7539968e5995cd854622e9c5dbd3 465992 web optional chromium_146.0.7680.80-1~deb13u1.debian.tar.xz
fc08df3a3a75a07753c862ade1e617b9 26797 web optional chromium_146.0.7680.80-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=mlM2
-----END PGP SIGNATURE-----
