-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 19 Mar 2026 19:35:31 -0400 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 146.0.7680.153-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Closes: 1130569 Changes: chromium (146.0.7680.153-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-4439: Out of bounds memory access in WebGL. Reported by Goodluck. - CVE-2026-4440: Out of bounds read and write in WebGL. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4441: Use after free in Base. Reported by Google. - CVE-2026-4442: Heap buffer overflow in CSS. Reported by Syn4pse. - CVE-2026-4443: Heap buffer overflow in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4444: Stack buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4445: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4446: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4447: Inappropriate implementation in V8. Reported by Erge. - CVE-2026-4448: Heap buffer overflow in ANGLE. Reported by M. Fauzan Wijaya (Gh05t666nero). - CVE-2026-4449: Use after free in Blink. Reported by Syn4pse. - CVE-2026-4450: Out of bounds write in V8. Reported by qymag1c. - CVE-2026-4451: Insufficient validation of untrusted input in Navigation. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4452: Integer overflow in ANGLE. Reported by cinzinga. - CVE-2026-4453: Integer overflow in Dawn. Reported by sweetchip. - CVE-2026-4454: Use after free in Network. Reported by heapracer (@heapracer). - CVE-2026-4455: Heap buffer overflow in PDFium. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4456: Use after free in Digital Credentials API. Reported by sean wong. - CVE-2026-4457: Type Confusion in V8. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-4458: Use after free in Extensions. Reported by Shaheen Fazim. - CVE-2026-4459: Out of bounds read and write in WebAudio. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) - CVE-2026-4460: Out of bounds read in Skia. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4461: Inappropriate implementation in V8. Reported by Google. - CVE-2026-4462: Out of bounds read in Blink. Reported by heapracer (@heapracer). - CVE-2026-4463: Heap buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-4464: Integer overflow in ANGLE. Reported by heesun. * d/patches/disable/glic.patch: refresh for upstream tab nudging changes . [ Jianfeng Liu ] * add upstreamed patch of boringssl to fix loong64 build (closes: #1130569) Checksums-Sha1: 8fe8e1df53fecf0363ac7366eb22860da2670cd9 5716620 chromium-common-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 2c8d34b3e33707591d3be452cd102f43c05e7a00 35106464 chromium-common_146.0.7680.153-1~deb13u1_ppc64el.deb d052ae89430a7114f773a73bd8a337257df53e17 29905752 chromium-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 1779c29bf9b511f1e292197a33493448bc61ad80 7159744 chromium-driver_146.0.7680.153-1~deb13u1_ppc64el.deb f6ec3a9e3fb9570f4749dedda12326e434cd822e 24803900 chromium-headless-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 7351c98da3369cfaba42a526b6abf4bdba5fb84d 58102120 chromium-headless-shell_146.0.7680.153-1~deb13u1_ppc64el.deb 38cbb0c50368aeb40337f22f0edbe843165161c0 20336 chromium-sandbox-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 802f69069254fa1298c862166ff8c823d1b88bfa 111452 chromium-sandbox_146.0.7680.153-1~deb13u1_ppc64el.deb 6ee8cac6b2fcf7f9876f1a7603f261fc58a0560b 25537700 chromium-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 6b7b74ef680111602107ffa59efb8b61a0788bca 57588908 chromium-shell_146.0.7680.153-1~deb13u1_ppc64el.deb 37ca665fd4a05c5bc95241e81c913bb90e84705f 30330 chromium_146.0.7680.153-1~deb13u1_ppc64el-buildd.buildinfo 5816d85e433a0e22bcd65f854518783b0ee12bc4 78190336 chromium_146.0.7680.153-1~deb13u1_ppc64el.deb Checksums-Sha256: f18f6e0fb004271bb8630acd8a6589a6d759886aacdea119cbb2c93a0d8289ae 5716620 chromium-common-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb b44106689076c342a4dc4f656ecc262d17636541ccf5c2c80ce79965d9ab5c3e 35106464 chromium-common_146.0.7680.153-1~deb13u1_ppc64el.deb 3cf00e74da868760fda49a790309ad1d5e4992eb15bb38b0bf0b82475f7c3faf 29905752 chromium-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb ba08fbe0e0a9533df99d7daac9f1bc5e516a8148229ca7047458408bdf5c5d48 7159744 chromium-driver_146.0.7680.153-1~deb13u1_ppc64el.deb 06cf38d53e8fe34b877f1a1e6ee7c62fd680372461580f88e9d039daa2d74d14 24803900 chromium-headless-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb e5b1b8587d2bee37c1466c0d5e1f47462fc2db110ef9edd6ffacae36b75dccc4 58102120 chromium-headless-shell_146.0.7680.153-1~deb13u1_ppc64el.deb 5c47e5a5ae6397b8901ebc7074e61741a7e44fa020f298b664667c5b2aac8530 20336 chromium-sandbox-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb c0ff068eb00701c52bb615af3bca1671df0aead049486977708065e9cd02f3ce 111452 chromium-sandbox_146.0.7680.153-1~deb13u1_ppc64el.deb f4e5b1f9e04249ab09ae3650f96793eefc9b5826d67b3b6ba8d4bba56dd6cefb 25537700 chromium-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 2dadaa6aac2aac53d8bff5629c670419538fa9fa2e8a1eb7ad6c526d9453ec8b 57588908 chromium-shell_146.0.7680.153-1~deb13u1_ppc64el.deb 1f2db4a48556a60b57040167e1998303caab88763146b249258350fd7f930ca7 30330 chromium_146.0.7680.153-1~deb13u1_ppc64el-buildd.buildinfo e94c0929b5856d30297454bb589703eacd9d96440a026f5ccb1fcb36756a1e1d 78190336 chromium_146.0.7680.153-1~deb13u1_ppc64el.deb Files: 82f2c0f83bab36d17af01ddbb98566c2 5716620 debug optional chromium-common-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb b2de32a2cd09af8ac3e8577f9fbc76f5 35106464 web optional chromium-common_146.0.7680.153-1~deb13u1_ppc64el.deb 819537986edf55d49a220cd7251a5c31 29905752 debug optional chromium-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 90a2845c0ececc405ee3334f32f8b997 7159744 web optional chromium-driver_146.0.7680.153-1~deb13u1_ppc64el.deb d96f9d8e1bf6e9aca9c21ff42eb1afa0 24803900 debug optional chromium-headless-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb c245b2a1688a9d892e98b33adab88ecd 58102120 web optional chromium-headless-shell_146.0.7680.153-1~deb13u1_ppc64el.deb a02de5240fa23096d0b63b79fe11bbed 20336 debug optional chromium-sandbox-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb 36ee416b45aa75d24db59d1129ca4daa 111452 web optional chromium-sandbox_146.0.7680.153-1~deb13u1_ppc64el.deb e4fb314c15f7fffed4ff2d5edaa7aef3 25537700 debug optional chromium-shell-dbgsym_146.0.7680.153-1~deb13u1_ppc64el.deb c8d6304239446efe333374812b736a20 57588908 web optional chromium-shell_146.0.7680.153-1~deb13u1_ppc64el.deb de017c3da2b17798092c3f2af818468c 30330 web optional chromium_146.0.7680.153-1~deb13u1_ppc64el-buildd.buildinfo fc4350f6ab9efa1eb5ae35d86fff10cf 78190336 web optional chromium_146.0.7680.153-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmm9voUACgkQOrVShFbI MGEJ/g//X8ch25EHVtRU+5nOLn3QcenOD2d4FcfiL00nVWyu4RZCqg0zz78+Wj1c xiFF7jTBbegf1O4paT/OwCLQKkNCAgVdAO/AKXIIZ19f2XkK/2wOU+o5mCuQBEiG 8Rz0sdWU8Yyd2g08GFt+YjaW2Q9Kthz5QeXbdWxinVR6M9a8NIlyzlWUn8OfHvkj kM9xeFiI/uh+R1jbrStkZ3Cfo8wTFHKXGmF5bO1XWzv6dscyyTZDY0ybE/bgDYnB 906DX1rJwv5LJCgZsPnJDlxCW9BXU6COy5Bdvop8dVMqxeIwTajGWmUF85qz8Cl9 tQmUc6HMzz3RzgoUlLsWN9nuj+RluRKA+cha4gSgSB3YsmcKdwkjDkhmN+WHX6M/ gt7dFajy89z6/z93RvTv0xzAco3e5wyUHQoI4FEj6VuR+8Iljb4EuH8LK6JjrQos FSy0CCMCYtqg3IQREheV6rfrxbjYWb/vsp+eHGpbOMCDX1OWlrOl/hNZF156fVVj L75+AExWyenCryEKAB2GZzcMSct58Ptumd1D6Or2zHUxPTFawsqDox+IB98FTByK nQXTj3D/F8QW3AmtgIaYOnEUHY18ZWBlW5Vi7/MJuKNAwbV7kjv6qgPTJt0OmxRM YHB2Vi5ecZGV3xgkgx1O8pluO0M7AfAKs3XW+XQRv6g7C6pS9iA= =+6im -----END PGP SIGNATURE-----