-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 14 Mar 2026 22:15:19 -0400
Source: chromium
Architecture: source
Version: 146.0.7680.80-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (146.0.7680.80-1~deb12u1) bookworm-security; urgency=high
.
[ Andres Salomon ]
* New upstream security release.
- CVE-2026-3909: Out of bounds write in Skia.
Reported by Google Threat Analysis Group.
- CVE-2026-3910: Inappropriate implementation in V8.
Reported by Google Threat Analysis Group.
* d/patches/disable/glic.patch: drop an unnecessary pieces of the patch.
Checksums-Sha1:
9325e780a10766f0293e487b8e74fd2bd8916c84 4061 chromium_146.0.7680.80-1~deb12u1.dsc
dfdb7ac355d070e236c27d9dcb31bd9a4edee686 786503132 chromium_146.0.7680.80.orig.tar.xz
fe239f4e91ded551355e034b9ddf9eddee834413 8555504 chromium_146.0.7680.80-1~deb12u1.debian.tar.xz
f7ba87375418c43b0184095bcb8cdb6ba107b555 26838 chromium_146.0.7680.80-1~deb12u1_source.buildinfo
Checksums-Sha256:
22b9a9b4700afbe33f4b952f8cbc13950063f098a0a33b5e0c91db72b582565f 4061 chromium_146.0.7680.80-1~deb12u1.dsc
ca3a1d273219d9fe614b0a7aadedb172fafbf02ff516f12fa9cf27d5e9a24cf4 786503132 chromium_146.0.7680.80.orig.tar.xz
df341f00181e971485a5997a517dd147e380b406141039c2a1dd8264d8b8725a 8555504 chromium_146.0.7680.80-1~deb12u1.debian.tar.xz
f91ce5ccd0382d7e38c1eb98d0c7bcc55ec55d487cba708a2dcea9acb8365390 26838 chromium_146.0.7680.80-1~deb12u1_source.buildinfo
Files:
e642955b6e0b47743e4f4bd048aba968 4061 web optional chromium_146.0.7680.80-1~deb12u1.dsc
c6df2da276c9b905b14be76ad79f9124 786503132 web optional chromium_146.0.7680.80.orig.tar.xz
d4c2a4baa44525638f56a74135744126 8555504 web optional chromium_146.0.7680.80-1~deb12u1.debian.tar.xz
a1dc9d0d002760386e3e56a9fc171f75 26838 web optional chromium_146.0.7680.80-1~deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmm2sEkUHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8Nudjfkzg//V6Ugf0QlzoCkEsYEoETivdhGFrfY
nKrVRcnj7/nUx4dnuYgsqjLtLATf5/sqa69Wv9t3CiBLfsfktsQn5DlpG/Ozy0RY
plfxRMAh9o9ybMGDSPDQu5z5O88S6N1Dh+9IeEPKvK5R4ZSs9khrB/XND4j10pbs
0e1hEcw4h7ILLIwuD8M3LljicsqEa5gRcrev0PGZuNeQ4AOixOI4sIuqR636iZdF
XrtnamT+LGrbKs0KQIKFApdZeZWdGDE9LWQInDIGiMNVoAwEQbM+L+jbwoEYHEBX
AuqSE6T2LNC0WPR6iwC77m/BhwKsZDKdRADglZVU5rfziFLkRbuTBP6ntHQE7Rd+
4lvWefFMqytKollqpIeSX9L6/bS81lQLUZSppoDpvDM5zFu0Sir+gZPbjHCzrwyq
M2KiPeJkBpreiVb/wwicX9jYFzk5hEdPF458mwXhDP2On4fLHUGCvPcISmED0+wN
DgyYyiA12JbXKTMVw4Z2gaUgAJQlO/0UPr6JwJeCarRHZ284BCkPonHiwc72lQT3
BiulHJ2PshjlgIZW7W1Xoulpmcd0IJ/X39ZwzouKQTKNi+zjhnljjYfE/PN/2eNK
ZmrztK8GESANQGBsO0faNsnWazhoaZCP/LThB5I/aV7w1e1yRWy3DMh/5pKC7Qdf
zh2b+6Q7QagFGT8=
=tlqQ
-----END PGP SIGNATURE-----
