-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Mar 2026 21:26:56 -0400
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 146.0.7680.164-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (146.0.7680.164-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-4673: Heap buffer overflow in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4674: Out of bounds read in CSS. Reported by Syn4pse.
     - CVE-2026-4675: Heap buffer overflow in WebGL.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4676: Use after free in Dawn.
       Reported by 86ac1f1587b71893ed2ad792cd7dde32.
     - CVE-2026-4677: Out of bounds read in WebAudio.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-4678: Use after free in WebGPU. Reported by Google.
     - CVE-2026-4679: Integer overflow in Fonts.
       Reported by GF, Un3xploitable Of DeadSec.
     - CVE-2026-4680: Use after free in FedCM. Reported by Shaheen Fazim.
Checksums-Sha1:
 efe790a95aea0a68ca60b7e7802e5a130b4f9a1d 8686696 chromium-l10n_146.0.7680.164-1~deb13u1_all.deb
 713bf0a4219dd6967934136d5cac3d12ecab6b4f 26871 chromium_146.0.7680.164-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 51a5e31344dc81a6b6c9f12477dd565eb665aaf53a3bc47ac801e7ff5e7cf95e 8686696 chromium-l10n_146.0.7680.164-1~deb13u1_all.deb
 e72751f08966240fb61b6dda6e0ac957b31882e9f545600da809e43cc4244df4 26871 chromium_146.0.7680.164-1~deb13u1_all-buildd.buildinfo
Files:
 443996326744861e2b4e59b65f1ed497 8686696 localization optional chromium-l10n_146.0.7680.164-1~deb13u1_all.deb
 8f579f6f46f6e36abbf1a0f45c2e7210 26871 web optional chromium_146.0.7680.164-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmnDLtcACgkQN8Ugyu9d
QiRh4A//XvvdVdUDkhEUakqSxE6ljPyhP6Moe8D1yizpBaw+931+MA4eqcr0/COZ
db5PNTZ6ChX8fmtxkODOlpI0goVPwOlp17Ugsfe2/oPQSdVHC3qZAPyqoOt8c6yb
m5Aq/n1nJ+bUxB8YsVG0TS9M3hcWdAzDjPM+I42GQRwenta+pYm/SmlMXPqRaOcp
0gpQ1Z6VkP3JnrZ+5crMsbVcWHw41aIvySaV7o6dJFMy/bbiZoeqdGEo82ElrdyF
trIjeDbzluLzY1nhylDcCVFYSonnvtrshW6+YMNFR8Tcrip402Snh7zV4LLcYN/3
xzP1jXVQLE+lGjOi7KE0HVFifYpPqk7jwAsy51g/5+DEqV37WQzSNhlvo84XXmtH
AzEbjBHLMw2X/EIrF2q1PCYdT2DhstRK7dGOKj0a9IRmM9LaYT54YfkiATIhChy3
BSZiI50iVD9nQApIUYNCAbbQMOpYiHOArm1QyUSG1rsHy5E7a8TRS5arGyWvhLmn
H1F4MHkmhwlCRPGTgq7OS2MAw2FOdpHJjxDd5tC/HDqhEtCeldJNUyqVxLnAYLfz
d60pHPcHxgRS8rbhIww0J9rVDuSTGfpa+Asc2smnviS4Gxy323ClfgOqtVRYpVx3
plgo6SLmQUA7DbRvQDaulv4wmeoogZbI2wrtl3e1thkYp+YNivM=
=Rbqz
-----END PGP SIGNATURE-----