-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Feb 2026 22:14:31 -0500 Source: chromium Architecture: source Version: 145.0.7632.116-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (145.0.7632.116-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2026-3061: Out of bounds read in Media. Reported by Luke Francis. - CVE-2026-3062: Out of bounds read and write in Tint. Reported by cinzinga. - CVE-2026-3063: Inappropriate implementation in DevTools. Reported by M. Fauzan Wijaya (Gh05t666nero). * d/patches/disable/glic.patch: add a patch to fix build with disabled Gemini Live in Chrome (glic). Checksums-Sha1: 234353537c624f7f7261395b29fe22185c333513 4082 chromium_145.0.7632.116-1~deb12u1.dsc 9177691d8684c0859b162e154a1990608eaa558a 748033980 chromium_145.0.7632.116.orig.tar.xz aabdfa9f21404785c00980591414c7fb2140b4e3 8546384 chromium_145.0.7632.116-1~deb12u1.debian.tar.xz e3d1e3a72fa4152327673ba912408b0299c5132f 26954 chromium_145.0.7632.116-1~deb12u1_source.buildinfo Checksums-Sha256: 9901c80fada6dca6ff9b743c4e328eb99929c008643d4ca110be4c9774e9c573 4082 chromium_145.0.7632.116-1~deb12u1.dsc 58bd99c3ce7cccf2a80f6136499a0db578eca5652c9832f0e31bec53d899f0ed 748033980 chromium_145.0.7632.116.orig.tar.xz a0905526cc9b47933772c48a2c75f42567b6bbc68275cb56ea641ca89d132f39 8546384 chromium_145.0.7632.116-1~deb12u1.debian.tar.xz a4827cf71a6081f37a2d57e10e3b3873a09a6e2039aa408e45768f94d563806c 26954 chromium_145.0.7632.116-1~deb12u1_source.buildinfo Files: b48030c6f18d2abe1fdf85f1f0695742 4082 web optional chromium_145.0.7632.116-1~deb12u1.dsc e9e1057a1b384dd1e42d47136c2dc305 748033980 web optional chromium_145.0.7632.116.orig.tar.xz f564ee2393ca9d6d990cb4ae53a3636d 8546384 web optional chromium_145.0.7632.116-1~deb12u1.debian.tar.xz bc76e540bb960b1740d122c82cf05b19 26954 web optional chromium_145.0.7632.116-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmmgE/oUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjeXNA/9GdQC6anQgz0pSJUs5yBmUM9SpbH0 BaVrFSkKhDNMjW9Qjvp9asdLca9jE3M+TiE+HF2Rvk1V5zqXhj8ttjwAGcFq8Hrq vASrLwTXdheeBR9YW8J9N2KUSjEnp3Br1e0cUP5f0CG6N6teT2rWjQ8wYl9KB5pX 6rE7m+WWJgBDbcystDtfUuOL6MquAXHfP/yJt+EKjeit3DK9GZQ1KhRLy5MOvq3c NEYPYIRV+6P+i3+ax8Z7z6p9TWulSy5V6NJPdi/a1dsoaRPn0Hl367nXEZxT/n5M OoF6mYtI1xyiCJkFCOG7//NolvBYpdtqeiCwpSrQpfAINvfj3ajeSh9/JkdnWcyH UDOnT47nEPpFLG6uWNKKolZEbyu0T3WRE4jhQfCp9Whvi0TME9Pz2BMS3+6xBu9T HE1/ziUHNOblH3DYg4mMcAdGs6rK36sw8s6/lUQ27lDALAGHfNmPd4+WFn8289N5 4QDVRbngc2dwRhnNOb+oXGgkI208Q10t3mnck3tQuwZ7aDQXrYOBuSdljSNJM7qn +dru3NKj0L1DpRxZkQoWeSM6WO7eeM86Sc39BYeAJ3Ao07gWQJZbFtvTwALX4IVI 3/BU2s7CcDHAmL0D8/186pWt2WjiWSl702mndf+9q0WP0u8nq/IuiNQ0xRRuB8zP S4r9F+AFyaiPuPc= =9hCw -----END PGP SIGNATURE-----