From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA256   
      
   Format: 1.8   
   Date: Wed, 04 Mar 2026 18:24:02 -0500   
   Source: chromium   
   Architecture: source   
   Version: 145.0.7632.159-1~deb13u1   
   Distribution: trixie-security   
   Urgency: high   
   Maintainer: Debian Chromium Team    
   Changed-By: Andres Salomon    
   Changes:   
    chromium (145.0.7632.159-1~deb13u1) trixie-security; urgency=high   
    .   
      [ Andres Salomon ]   
      * New upstream security release.   
        - CVE-2026-3536: Integer overflow in ANGLE. Reported by cinzinga.   
        - CVE-2026-3537: Object lifecycle issue in PowerVR.   
          Reported by Zhihua Yao of KunLun Lab.   
        - CVE-2026-3538: Integer overflow in Skia.   
          Reported by Symeon Paraschoudis.   
        - CVE-2026-3539: Object lifecycle issue in DevTools.   
          Reported by Zhenpeng (Leo) Lin at depthfirst.   
        - CVE-2026-3540: Inappropriate implementation in WebAudio.   
          Reported by Davi Antônio Cruz.   
        - CVE-2026-3541: Inappropriate implementation in CSS. Reported by Syn4pse.   
        - CVE-2026-3542: Inappropriate implementation in WebAssembly.   
          Reported by qymag1c.   
        - CVE-2026-3543: Inappropriate implementation in V8. Reported by qymag1c.   
        - CVE-2026-3544: Heap buffer overflow in WebCodecs.   
          Reported by c6eed09fc8b174b0f3eebedcceb1e792.   
        - CVE-2026-3545: Insufficient data validation in Navigation.   
          Reported by Google.   
    .   
      [ Daniel Richard G. ]   
      * Re-bundle libxslt, to fix crashes due to an ABI incompatibility between   
        the bundled libxml2 and the system libxml2 used by the system libxslt.   
        - d/clean, d/control, d/copyright: Remove libxslt references.   
        - d/scripts/unbundle: Add entry for libxslt.   
   Checksums-Sha1:   
    e8ab1f4a188fd55a8ea3a3c46551e4e4cece884a 4099 chromium_145.0.76   
   2.159-1~deb13u1.dsc   
    c0cc45a02b6cd8746f5d8a4f7f7ef7166d16652b 748398176 chromium_145   
   0.7632.159.orig.tar.xz   
    8221b3296b642bca7a8345b356afee293f3c08b7 457628 chromium_145.0.   
   632.159-1~deb13u1.debian.tar.xz   
    4bba3651f79ff8ba53b7c38be14ac14b12a112db 26764 chromium_145.0.7   
   32.159-1~deb13u1_source.buildinfo   
   Checksums-Sha256:   
    dfe5923f25a9faadc750576f57e1a68296b1dd84da065b5ace22d4740f42bf08 4099   
   chromium_145.0.7632.159-1~deb13u1.dsc   
    490ce852b330537670ca5006a39bd1ec7c2057e1e69ce4f93f9c0abaaaa6e87f 748398176   
   chromium_145.0.7632.159.orig.tar.xz   
    0240c274c484f0ee40a356a2072a13480e68ebdb9f38487cfd830ae8df6959b2 457628   
   chromium_145.0.7632.159-1~deb13u1.debian.tar.xz   
    a32abd8e4bd63be0758ea2de14e095914d4882735f893dbba5290d6a42bed2f6 26764   
   chromium_145.0.7632.159-1~deb13u1_source.buildinfo   
   Files:   
    7ee165d976fd5cc3162470e8badb2353 4099 web optional chromium_145   
   0.7632.159-1~deb13u1.dsc   
    88c0c6e6882b4687d3a6637f76838d4c 748398176 web optional chromiu   
   _145.0.7632.159.orig.tar.xz   
    a3bd54582a7eac2ae3951fbcaa064d4f 457628 web optional chromium_1   
   5.0.7632.159-1~deb13u1.debian.tar.xz   
    808c4155f585c5edaeb0d0713098862a 26764 web optional chromium_14   
   .0.7632.159-1~deb13u1_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmmo53oUHGRpbGluZ2Vy   
   QGRlYmlhbi5vcmcACgkQZF0CR8NudjfPDA//Q88FZPs4cOu1UnKUBYwtacakwx4S   
   k+yMOCQqLI3GjF2n54yhtY6xvhqGH6KW2Y9zknEGPjszw5e9Y27FoC2I96nQ/OYL   
   w2dUdNZkIQ7E8+OD0KYpAHb8CVGxi2J4VqsQsgWKKHrz/h2STbvi31cVQOWT87Bn   
   wEWbjBQ/d2CQqgWr8tKMgc6QYpQtWM+LvRK0JgNN2ypdCBc+a3Olg2mWEsdMRO7y   
   bD58Un26+QmYbVXDl1AN2C7gG8G2wqq31wrFq0WUfIwgkIMs6nw2Bj2KtQzSKShu   
   BSaBPgjxwALaQYq4tM5Q8x/NBIz1bMIWBXrjWgT9e7P8lznO+OqmaDqkrRTNB4bH   
   O8rxcsHc4eRtWjnpYewUdxtaqhjsz29j5sB98kOpVjWSboB03Mi+U5JhjGAW/hzi   
   ORbbedzkHm98qXM3I0/A8gTDdtEY/5P4z8C69oFWertCZV6qiFa4lZTDQLZy0CZO   
   ljttj/75BfwO5TgsaN5Y1nl6XMEV54u6X0T9EprFnrsJDCY/dcAmpEZOV40VAMeP   
   zPAXtz9Kro8MZDzguIdGwEAi/BUV3mP9upNDnHVnBlfCuT0TbmvwnmCKqyTHVPqI   
   QGJC2W+nnfBYsyIDk7yblqz0C0qm4pmFQiF/ElY0ssSakqs6jhs8RRzFtl2MNz/G   
   J/I5DP8zDj8iM9o=   
   =wIJ9   
   -----END PGP SIGNATURE-----   
      
      
   --==============D65349111041279180=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaasrtQAKCRCb9qggYcy5   
   IWWoAP9WAj7RX+VabfLppFdjjefEkOf5yROvONgAzDgeJAQBBQD/R/PV8i3m9Ll3   
   tSfu+X5H7ljUGUMStQ2poyn8/MIc8wg=zyAP   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)