-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 04 Mar 2026 18:24:02 -0500
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 145.0.7632.159-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (145.0.7632.159-1~deb13u1) trixie-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream security release.
     - CVE-2026-3536: Integer overflow in ANGLE. Reported by cinzinga.
     - CVE-2026-3537: Object lifecycle issue in PowerVR.
       Reported by Zhihua Yao of KunLun Lab.
     - CVE-2026-3538: Integer overflow in Skia.
       Reported by Symeon Paraschoudis.
     - CVE-2026-3539: Object lifecycle issue in DevTools.
       Reported by Zhenpeng (Leo) Lin at depthfirst.
     - CVE-2026-3540: Inappropriate implementation in WebAudio.
       Reported by Davi Antônio Cruz.
     - CVE-2026-3541: Inappropriate implementation in CSS. Reported by Syn4pse.
     - CVE-2026-3542: Inappropriate implementation in WebAssembly.
       Reported by qymag1c.
     - CVE-2026-3543: Inappropriate implementation in V8. Reported by qymag1c.
     - CVE-2026-3544: Heap buffer overflow in WebCodecs.
       Reported by c6eed09fc8b174b0f3eebedcceb1e792.
     - CVE-2026-3545: Insufficient data validation in Navigation.
       Reported by Google.
 .
   [ Daniel Richard G. ]
   * Re-bundle libxslt, to fix crashes due to an ABI incompatibility between
     the bundled libxml2 and the system libxml2 used by the system libxslt.
     - d/clean, d/control, d/copyright: Remove libxslt references.
     - d/scripts/unbundle: Add entry for libxslt.
Checksums-Sha1:
 e7bbf79db992d1b7960a3a58ba84942aabbccef6 8636148 chromium-l10n_145.0.7632.159-1~deb13u1_all.deb
 5268b44236f0a8c8c14b5bff932bc9e0d6660092 26816 chromium_145.0.7632.159-1~deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 85bcd8b67e12e29059e7a1d338c8ade8c8cb36c07447ba77cdb7cc095e2b1aee 8636148 chromium-l10n_145.0.7632.159-1~deb13u1_all.deb
 635ad1bb5b18a8c65ef85250d6fe404837921d77edd161094b70b6ad4c987232 26816 chromium_145.0.7632.159-1~deb13u1_all-buildd.buildinfo
Files:
 0ae322e4aab1748a9fde6b7f714834b3 8636148 localization optional chromium-l10n_145.0.7632.159-1~deb13u1_all.deb
 002407184adebd73007d87145a8e8d58 26816 web optional chromium_145.0.7632.159-1~deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=UDs7
-----END PGP SIGNATURE-----