-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 14 Mar 2026 22:15:19 -0400 Source: chromium Architecture: source Version: 146.0.7680.80-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (146.0.7680.80-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-3909: Out of bounds write in Skia. Reported by Google Threat Analysis Group. - CVE-2026-3910: Inappropriate implementation in V8. Reported by Google Threat Analysis Group. * d/patches/disable/glic.patch: drop an unnecessary pieces of the patch. Checksums-Sha1: 9325e780a10766f0293e487b8e74fd2bd8916c84 4061 chromium_146.0.7680.80-1~deb12u1.dsc dfdb7ac355d070e236c27d9dcb31bd9a4edee686 786503132 chromium_146.0.7680.80.orig.tar.xz fe239f4e91ded551355e034b9ddf9eddee834413 8555504 chromium_146.0.7680.80-1~deb12u1.debian.tar.xz f7ba87375418c43b0184095bcb8cdb6ba107b555 26838 chromium_146.0.7680.80-1~deb12u1_source.buildinfo Checksums-Sha256: 22b9a9b4700afbe33f4b952f8cbc13950063f098a0a33b5e0c91db72b582565f 4061 chromium_146.0.7680.80-1~deb12u1.dsc ca3a1d273219d9fe614b0a7aadedb172fafbf02ff516f12fa9cf27d5e9a24cf4 786503132 chromium_146.0.7680.80.orig.tar.xz df341f00181e971485a5997a517dd147e380b406141039c2a1dd8264d8b8725a 8555504 chromium_146.0.7680.80-1~deb12u1.debian.tar.xz f91ce5ccd0382d7e38c1eb98d0c7bcc55ec55d487cba708a2dcea9acb8365390 26838 chromium_146.0.7680.80-1~deb12u1_source.buildinfo Files: e642955b6e0b47743e4f4bd048aba968 4061 web optional chromium_146.0.7680.80-1~deb12u1.dsc c6df2da276c9b905b14be76ad79f9124 786503132 web optional chromium_146.0.7680.80.orig.tar.xz d4c2a4baa44525638f56a74135744126 8555504 web optional chromium_146.0.7680.80-1~deb12u1.debian.tar.xz a1dc9d0d002760386e3e56a9fc171f75 26838 web optional chromium_146.0.7680.80-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmm2sEkUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudjfkzg//V6Ugf0QlzoCkEsYEoETivdhGFrfY nKrVRcnj7/nUx4dnuYgsqjLtLATf5/sqa69Wv9t3CiBLfsfktsQn5DlpG/Ozy0RY plfxRMAh9o9ybMGDSPDQu5z5O88S6N1Dh+9IeEPKvK5R4ZSs9khrB/XND4j10pbs 0e1hEcw4h7ILLIwuD8M3LljicsqEa5gRcrev0PGZuNeQ4AOixOI4sIuqR636iZdF XrtnamT+LGrbKs0KQIKFApdZeZWdGDE9LWQInDIGiMNVoAwEQbM+L+jbwoEYHEBX AuqSE6T2LNC0WPR6iwC77m/BhwKsZDKdRADglZVU5rfziFLkRbuTBP6ntHQE7Rd+ 4lvWefFMqytKollqpIeSX9L6/bS81lQLUZSppoDpvDM5zFu0Sir+gZPbjHCzrwyq M2KiPeJkBpreiVb/wwicX9jYFzk5hEdPF458mwXhDP2On4fLHUGCvPcISmED0+wN DgyYyiA12JbXKTMVw4Z2gaUgAJQlO/0UPr6JwJeCarRHZ284BCkPonHiwc72lQT3 BiulHJ2PshjlgIZW7W1Xoulpmcd0IJ/X39ZwzouKQTKNi+zjhnljjYfE/PN/2eNK ZmrztK8GESANQGBsO0faNsnWazhoaZCP/LThB5I/aV7w1e1yRWy3DMh/5pKC7Qdf zh2b+6Q7QagFGT8= =tlqQ -----END PGP SIGNATURE-----