-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 23 Apr 2026 20:10:12 -0400 Source: chromium Architecture: source Version: 147.0.7727.116-1 Distribution: unstable Urgency: high Maintainer: Debian Chromium Team <chromium@packages.debian.org> Changed-By: Andres Salomon <dilinger@debian.org> Closes: 1134412 Changes: chromium (147.0.7727.116-1) unstable; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-6919: Use after free in DevTools. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-6920: Out of bounds read in GPU. Reported by tatiwari of Microsoft. - CVE-2026-6921: Race in GPU. Reported by soiax. . [ Jochen Sprickerhof ] * Make chromium.png icon reproducible (closes: #1134412). Checksums-Sha1: c627d8349448c41ea4a9bc4049076a7aeda741ca 4065 chromium_147.0.7727.116-1.dsc 05f90e2adbe94d49c024a19087189a1b26fc2e97 787243264 chromium_147.0.7727.116.orig.tar.xz c751a8a5042f30bf802d993152bd3a3bd9e79c31 478896 chromium_147.0.7727.116-1.debian.tar.xz eff62b8a31d16021359c4dd88810f07824ef93df 27947 chromium_147.0.7727.116-1_source.buildinfo Checksums-Sha256: c5543e6852112c478f97f3a43a63ba3decd67a72f218e53373fd57b06c20cb6f 4065 chromium_147.0.7727.116-1.dsc b808992f5a680372b8276466645183315326d8d0e66f080266883a07f36551c8 787243264 chromium_147.0.7727.116.orig.tar.xz d0baa586834b2570db492db0b1ffbc8e4cc780b1adf2f96abf71d3df7aabbff2 478896 chromium_147.0.7727.116-1.debian.tar.xz fdb25e5ac37f1679420886f10f71c3e28ca03e57379563e3d075ab756aa9ed6d 27947 chromium_147.0.7727.116-1_source.buildinfo Files: cf950f411eada4adeb1bf4289b028e44 4065 web optional chromium_147.0.7727.116-1.dsc 083a2901f851b88d01de65dc337edec6 787243264 web optional chromium_147.0.7727.116.orig.tar.xz c3a73e19957ead35310bc5e48c3fabc4 478896 web optional chromium_147.0.7727.116-1.debian.tar.xz 724cfa0daf2a3766b84b5537811a5504 27947 web optional chromium_147.0.7727.116-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmnqw2AUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjedlA//ekrtr2O2pH/5vJKElm6+LbFUzB05 R5s82Abh8cAw/HWZRkKLglbXTTxePNtLHaH7Cwzh+U5zkHRXelR8hbHc3t5t5dtW bJAY4dwMV0m950/YIfvfY7IONb8baZ2g6pE0SyzcG8N7CV5SE0YTlGDyKNIJihns 7phn+Qyw2YGSv6xf58eg4RZkL0rSvMIFdSpkNRzLVuaqL9rGGZJWkCyXWRzGnQyG Kk1SFePqWKAaMCDWzPl4ifKSGZaWBqQhwtXFs7eOHPpAzk6vJLoNBw1v360z+R4t YFpKnPJw6jqr5KPxFQpRHDhQcldRVcKUyJ48bWmAcy6TZgWujv9GrpqaW+lCwGPR Ee5NZu8pnD8FSxkBY2/YPFoVgnqNOrq0tKiTtZPj1lNMRxjsfizQQCKEIhpcAcWz JzV6GYr/3bE+VhGeXGTWNlscmgCnfFKywFScTlYLP9NgtdkOSRR9C9ttXHFtKD8K CFJuGrFyLiBTdhtlw5aMPXuKc/JsBGctFftVBwVZMxlmI6k/wUz2tPt04L/ahNuz OXMjcvp/FrcHNSumPC1Tjpz+M9tpd977xRv2ddK8mb0UeqXyqDokR1PBzaGx3TE3 FxO0bk/EGMPiAd8a/ynpF/iOqavQNnkZ3XEnYiSkuK4zXMyoAF6EhYjmgxNxUYl+ jQSEtnkx4cI6PWw= =IPNq -----END PGP SIGNATURE-----