-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 04 Mar 2026 18:24:02 -0500 Source: chromium Architecture: source Version: 145.0.7632.159-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team <[email protected]> Changed-By: Andres Salomon <[email protected]> Changes: chromium (145.0.7632.159-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-3536: Integer overflow in ANGLE. Reported by cinzinga. - CVE-2026-3537: Object lifecycle issue in PowerVR. Reported by Zhihua Yao of KunLun Lab. - CVE-2026-3538: Integer overflow in Skia. Reported by Symeon Paraschoudis. - CVE-2026-3539: Object lifecycle issue in DevTools. Reported by Zhenpeng (Leo) Lin at depthfirst. - CVE-2026-3540: Inappropriate implementation in WebAudio. Reported by Davi Antônio Cruz. - CVE-2026-3541: Inappropriate implementation in CSS. Reported by Syn4pse. - CVE-2026-3542: Inappropriate implementation in WebAssembly. Reported by qymag1c. - CVE-2026-3543: Inappropriate implementation in V8. Reported by qymag1c. - CVE-2026-3544: Heap buffer overflow in WebCodecs. Reported by c6eed09fc8b174b0f3eebedcceb1e792. - CVE-2026-3545: Insufficient data validation in Navigation. Reported by Google. . [ Daniel Richard G. ] * Re-bundle libxslt, to fix crashes due to an ABI incompatibility between the bundled libxml2 and the system libxml2 used by the system libxslt. - d/clean, d/control, d/copyright: Remove libxslt references. - d/scripts/unbundle: Add entry for libxslt. Checksums-Sha1: e8ab1f4a188fd55a8ea3a3c46551e4e4cece884a 4099 chromium_145.0.7632.159-1~deb13u1.dsc c0cc45a02b6cd8746f5d8a4f7f7ef7166d16652b 748398176 chromium_145.0.7632.159.orig.tar.xz 8221b3296b642bca7a8345b356afee293f3c08b7 457628 chromium_145.0.7632.159-1~deb13u1.debian.tar.xz 4bba3651f79ff8ba53b7c38be14ac14b12a112db 26764 chromium_145.0.7632.159-1~deb13u1_source.buildinfo Checksums-Sha256: dfe5923f25a9faadc750576f57e1a68296b1dd84da065b5ace22d4740f42bf08 4099 chromium_145.0.7632.159-1~deb13u1.dsc 490ce852b330537670ca5006a39bd1ec7c2057e1e69ce4f93f9c0abaaaa6e87f 748398176 chromium_145.0.7632.159.orig.tar.xz 0240c274c484f0ee40a356a2072a13480e68ebdb9f38487cfd830ae8df6959b2 457628 chromium_145.0.7632.159-1~deb13u1.debian.tar.xz a32abd8e4bd63be0758ea2de14e095914d4882735f893dbba5290d6a42bed2f6 26764 chromium_145.0.7632.159-1~deb13u1_source.buildinfo Files: 7ee165d976fd5cc3162470e8badb2353 4099 web optional chromium_145.0.7632.159-1~deb13u1.dsc 88c0c6e6882b4687d3a6637f76838d4c 748398176 web optional chromium_145.0.7632.159.orig.tar.xz a3bd54582a7eac2ae3951fbcaa064d4f 457628 web optional chromium_145.0.7632.159-1~deb13u1.debian.tar.xz 808c4155f585c5edaeb0d0713098862a 26764 web optional chromium_145.0.7632.159-1~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmmo53oUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjfPDA//Q88FZPs4cOu1UnKUBYwtacakwx4S k+yMOCQqLI3GjF2n54yhtY6xvhqGH6KW2Y9zknEGPjszw5e9Y27FoC2I96nQ/OYL w2dUdNZkIQ7E8+OD0KYpAHb8CVGxi2J4VqsQsgWKKHrz/h2STbvi31cVQOWT87Bn wEWbjBQ/d2CQqgWr8tKMgc6QYpQtWM+LvRK0JgNN2ypdCBc+a3Olg2mWEsdMRO7y bD58Un26+QmYbVXDl1AN2C7gG8G2wqq31wrFq0WUfIwgkIMs6nw2Bj2KtQzSKShu BSaBPgjxwALaQYq4tM5Q8x/NBIz1bMIWBXrjWgT9e7P8lznO+OqmaDqkrRTNB4bH O8rxcsHc4eRtWjnpYewUdxtaqhjsz29j5sB98kOpVjWSboB03Mi+U5JhjGAW/hzi ORbbedzkHm98qXM3I0/A8gTDdtEY/5P4z8C69oFWertCZV6qiFa4lZTDQLZy0CZO ljttj/75BfwO5TgsaN5Y1nl6XMEV54u6X0T9EprFnrsJDCY/dcAmpEZOV40VAMeP zPAXtz9Kro8MZDzguIdGwEAi/BUV3mP9upNDnHVnBlfCuT0TbmvwnmCKqyTHVPqI QGJC2W+nnfBYsyIDk7yblqz0C0qm4pmFQiF/ElY0ssSakqs6jhs8RRzFtl2MNz/G J/I5DP8zDj8iM9o= =wIJ9 -----END PGP SIGNATURE-----
pgp9DVOTk5j4V.pgp
Description: PGP signature

