-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 146.0.7680.164-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (146.0.7680.164-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 9b2b59f872892f767e59f3423dd67de0c29e06b2 8689020 chromium-l10n_146.0.7680.164-1~deb12u1_all.deb
 7bc2f36409568ae5bac48dbfc4c30e434a995c0b 26896 chromium_146.0.7680.164-1~deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 90ca43b7c1a5bf3bb4d23619df1a819ebcf0fac289de5dc19f5321ae13a25dfa 8689020 chromium-l10n_146.0.7680.164-1~deb12u1_all.deb
 627274734014da3e62751ad51c076b9af6b10c55de1cee08ec57f2cd2f6bd826 26896 chromium_146.0.7680.164-1~deb12u1_all-buildd.buildinfo
Files:
 d8e3cbbad48286ef5dadfd750268037d 8689020 localization optional chromium-l10n_146.0.7680.164-1~deb12u1_all.deb
 c3160469cf3befbca687a2e801a6d5cb 26896 web optional chromium_146.0.7680.164-1~deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=imV1
-----END PGP SIGNATURE-----