-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym
Architecture: arm64
Version: 146.0.7680.164-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium   - web browser
 chromium-common - web browser - common resources used by the chromium packages
 chromium-driver - web browser - WebDriver support
 chromium-headless-shell - web browser - old headless shell
 chromium-sandbox - web browser - setuid security sandbox for chromium
 chromium-shell - web browser - minimal shell
Changes:
 chromium (146.0.7680.164-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 105774bd076111c185a75e2da382bf92458bd0ff 6289900 chromium-common-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 07d0172ad3fcc42e0c0b3dab045778dd3003bcac 34082248 chromium-common_146.0.7680.164-1~deb12u1_arm64.deb
 25059b4ca4d487f00c354cfb4f9d7e2363864e3d 36180088 chromium-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 d92de8317460480b8c04f3707d9520112d436d2f 6640520 chromium-driver_146.0.7680.164-1~deb12u1_arm64.deb
 9113c297172f2c0f0bf00d811da5515d43c51ada 29412908 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 13dd5f76616659dba4326107ff43482b24c9f166 49885060 chromium-headless-shell_146.0.7680.164-1~deb12u1_arm64.deb
 01a518ddb4133fd87b86b25ea5fb0dbd75a6a7bb 20252 chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 36abb05c7eec0dfefa5eb5e685aaa5115f1d2176 114348 chromium-sandbox_146.0.7680.164-1~deb12u1_arm64.deb
 12d54e28db323b62720325f92d5d5d8aaed7f197 31695608 chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 ed465f3036e311a8e370df4c83385e6747a5dbf9 54411284 chromium-shell_146.0.7680.164-1~deb12u1_arm64.deb
 fda32f31861d6b4a8dc05e0af5c191fa3e66180d 30387 chromium_146.0.7680.164-1~deb12u1_arm64-buildd.buildinfo
 7bdce793f2202a645b3fe270326fd27b97669bed 63571680 chromium_146.0.7680.164-1~deb12u1_arm64.deb
Checksums-Sha256:
 08b1adea7785ff650518a8c5c3e8b1a070d61748d8ac5e9762d3460afda24be6 6289900 chromium-common-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 ea86e80b1edd13f6a7144dd001d5cd73d74ef41625e847c038ce5e65690cd586 34082248 chromium-common_146.0.7680.164-1~deb12u1_arm64.deb
 579aa7b9edd1f6560d2a2e1da9d6d8d4ba8ba47738a405bf6ac4ccebd3dbf42f 36180088 chromium-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 d31d0c194278c2fcc260822b9bf7d4849bf53bd2e45f112891d6930d5595660b 6640520 chromium-driver_146.0.7680.164-1~deb12u1_arm64.deb
 208b269f12ceecb0f2af66a36d58006a826b8ecfc00e594c7a1974ad2bb499e8 29412908 chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 cd79b3ccdb43d67e7f83344bce2db604a203f99c1188e11b8827030a7d828f7b 49885060 chromium-headless-shell_146.0.7680.164-1~deb12u1_arm64.deb
 bb302691ed8f7174931a264fbbf071f1c5445c3d17a6c7784a610774f274c98e 20252 chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 bebede06845a0350ab6d9fb37ebdd3dee4216fcdfa1a8172b5be30c3370f45b4 114348 chromium-sandbox_146.0.7680.164-1~deb12u1_arm64.deb
 9a550211b34772bb8e09b1c4f60ac20271601283438d12273fcb0a7c8d15d0d9 31695608 chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 de1bd734cb658346c23fb008a2e19cb7a60d5d7e2c3f1f52b983f126b7bd115c 54411284 chromium-shell_146.0.7680.164-1~deb12u1_arm64.deb
 9e55301a11f8854b692ab1b190f6d6b9cd689caa9be3a235923c5cecfebf8784 30387 chromium_146.0.7680.164-1~deb12u1_arm64-buildd.buildinfo
 81d23bb336810172f7c2b08e7eb9d7753942344fad33d016b775332cea5804ec 63571680 chromium_146.0.7680.164-1~deb12u1_arm64.deb
Files:
 9adee7db222583b16c652b94784b4da5 6289900 debug optional chromium-common-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 6d170e9e94bb2f7cefbfb6b6efd98a02 34082248 web optional chromium-common_146.0.7680.164-1~deb12u1_arm64.deb
 ffb6870d401056dbf905bc6297d44466 36180088 debug optional chromium-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 c8d273833b21ecc8a90a219d1560d48c 6640520 web optional chromium-driver_146.0.7680.164-1~deb12u1_arm64.deb
 3638a4eba89284619969988dbecbe3e8 29412908 debug optional chromium-headless-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 4db6e06c34a51812ab8610a4e7daf9bd 49885060 web optional chromium-headless-shell_146.0.7680.164-1~deb12u1_arm64.deb
 14c515b6e0fd8681af6ac438de5e5515 20252 debug optional chromium-sandbox-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 b9bcc347a22f82705d6c02ed0bb37c88 114348 web optional chromium-sandbox_146.0.7680.164-1~deb12u1_arm64.deb
 00ae90973bd22c0d057dc306fe9f8041 31695608 debug optional chromium-shell-dbgsym_146.0.7680.164-1~deb12u1_arm64.deb
 53dd5f4b3e7f4a180f98b54e968afe76 54411284 web optional chromium-shell_146.0.7680.164-1~deb12u1_arm64.deb
 6aa7c56fd1fb152a0a376da506685f7d 30387 web optional chromium_146.0.7680.164-1~deb12u1_arm64-buildd.buildinfo
 d03a8428e9097ceb8e87e439b2cac50b 63571680 web optional chromium_146.0.7680.164-1~deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=Nx4h
-----END PGP SIGNATURE-----