-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 14 Mar 2026 22:15:19 -0400 Source: chromium Architecture: source Version: 146.0.7680.80-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (146.0.7680.80-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-3909: Out of bounds write in Skia. Reported by Google Threat Analysis Group. - CVE-2026-3910: Inappropriate implementation in V8. Reported by Google Threat Analysis Group. * d/patches/disable/glic.patch: drop an unnecessary pieces of the patch. Checksums-Sha1: 15f9a3644786f6fcf531a61f85fba4f7069007d9 4092 chromium_146.0.7680.80-1~deb13u1.dsc dfdb7ac355d070e236c27d9dcb31bd9a4edee686 786503132 chromium_146.0.7680.80.orig.tar.xz c3b77596db6c570584a1bdb8ac0224055856546a 465992 chromium_146.0.7680.80-1~deb13u1.debian.tar.xz 6afd8c84a9748afebf82f37a78b354d40567ea28 26797 chromium_146.0.7680.80-1~deb13u1_source.buildinfo Checksums-Sha256: 469d469f3f846c4f6068c8ae1784519a8ad134acf3c92c4234a3b392c8e22611 4092 chromium_146.0.7680.80-1~deb13u1.dsc ca3a1d273219d9fe614b0a7aadedb172fafbf02ff516f12fa9cf27d5e9a24cf4 786503132 chromium_146.0.7680.80.orig.tar.xz af0c54ee237bc9d31643ba92fa864623fbe5c5d033daec887b53ed7d815519ce 465992 chromium_146.0.7680.80-1~deb13u1.debian.tar.xz 535297bc7c1d9ea6387f2eb6fd0fadc58a326b922c804bc873912f63ce65202d 26797 chromium_146.0.7680.80-1~deb13u1_source.buildinfo Files: 607040cc54781c4abb96ad9405770453 4092 web optional chromium_146.0.7680.80-1~deb13u1.dsc c6df2da276c9b905b14be76ad79f9124 786503132 web optional chromium_146.0.7680.80.orig.tar.xz 704a7539968e5995cd854622e9c5dbd3 465992 web optional chromium_146.0.7680.80-1~deb13u1.debian.tar.xz fc08df3a3a75a07753c862ade1e617b9 26797 web optional chromium_146.0.7680.80-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmm2StgUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjdAihAAnC0oTvRo6egTwJA+bIuiUXDKn1hx N8iQvGLrDEAEA//ttsriWjxVdZela9ig6UIjRYj//ADegQZYEwialUFISWpHzomn qM/KlcQVFjRkoOZ2aRMeuaey34fWlZRCWOGSXVNI2dfOr6AB23j1v2Hvii6TUJ+Z uLRgeYucEdb6Ut/3PBmNxXEeIl4rkjuFKux6tHgDc1CYOt/6uv5uu/eHbGgzLceW 27bX+hoRMjeeuPfxE9/FxNnDxopIg9pZEvGkD6vyqZTR12ItOsELjSnlMFNNK0Rw BCXNMxF74K/ChVkEoOH2WqD8eAv3dXPtphDWtQwk329w8IAesI520/bmIL11iOVs bafdaHEoS3fwJCbCP30FALPitJLSXVdoTIrjQdxtlM5arCu6NKVt+vohElXMLZ6y /zZQzIIxUshOWWZCsHwihA5ABJl6SO/8/dbHLpn/I2sEbVaCycfNAjCRHmKR6XJZ 6rcz1SJOLe/4vwgmYKZEZkK9EhwiQABBL6TyQzOp2zNW9bbVT5wUOPXkfr34d/gK A6qhFC6ZPxzR1GERKv+7ZDHLDwlE/TNpCDEQRQvO4mVM1Q/AqgdRn6EGggx8tXuX shs3XKY0KdqdpJioW4hDuwbUqB2wtU/HLjckrr/2iLIh6UJR79ri2xzk5RaxKoyH H8JO0EupYZeg0e8= =mlM2 -----END PGP SIGNATURE-----