-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 144.0.7559.59-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt-web as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. - bookworm/path-rustfmt.patch: add patch to override search path for rustfmt (which chromium deduces incorrectly due to our bundled bindgen in bookworm). . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. - bookworm/eslint.patch: Refresh, and add another import.meta.dirname conversion. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: 26f2d5289063d383ee4d1e135351008ce9cdb6ff 6228284 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 2ff913dfa3d7c4c63543f1a59bb6100ea3d9d657 27912440 chromium-common_144.0.7559.59-1~deb12u1_arm64.deb a7222534cb142254a55d923637f750560e4767ff 35010208 chromium-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 4250be3889a9550f6b72fc506809d599803999f3 6514640 chromium-driver_144.0.7559.59-1~deb12u1_arm64.deb 56eb52cf949584852da5fa678e970147a5c92c41 28379296 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb dbb9a60b16291108d036af5e5665ab3af9642a4c 48473060 chromium-headless-shell_144.0.7559.59-1~deb12u1_arm64.deb 2e6b291d2af3cd74af5f98a8e718403caf88baf0 20252 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb e01cc5615cd9298ddf0924af816b76e21dc33ec2 110232 chromium-sandbox_144.0.7559.59-1~deb12u1_arm64.deb 0999af51dce2262435e4922fab0e63c75cbf079f 30626660 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb baee00aadd60fcded26966c83ed18108c30f7bed 52954212 chromium-shell_144.0.7559.59-1~deb12u1_arm64.deb b4e63dce26342afff3cb1935b82efcb31190be7e 30339 chromium_144.0.7559.59-1~deb12u1_arm64-buildd.buildinfo f88c6f9f59281f39720b695971eb9f0a3f13b475 62202712 chromium_144.0.7559.59-1~deb12u1_arm64.deb Checksums-Sha256: a588d2767ce09604f59a32b4ac7b5300dbebe48bb28d2ce97b9fa7faf958c832 6228284 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 3a99ef3ece65f258c74a571950a96076a776feaa011a9f7667d9359a3933751c 27912440 chromium-common_144.0.7559.59-1~deb12u1_arm64.deb f661dc5dd0fd1dfd0039e5101f5ea3e2970b7f6ce3919a8e37b9fa1e0e9c60e5 35010208 chromium-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 43feb7f585a85ec346435d1dcc6559d89765f2680265dc734f2fbd372bc9ec5c 6514640 chromium-driver_144.0.7559.59-1~deb12u1_arm64.deb a0d703854dafd842dd13b90155ef184a1cd2c3f993f6a5e113f29b6bcf91858b 28379296 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 70cf5e2444a356438e8343082d03f91c4b3e02565d93fa47c611c285ff93cd69 48473060 chromium-headless-shell_144.0.7559.59-1~deb12u1_arm64.deb 6233235f40085797a09f8bac93b0c3d3dd9d4b12613a90215b5cfa1a63bf1841 20252 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb ba8ad8d2938ccdfebeb2eb5bdd885c78a673439fd05bdf1cbef80705dafb6199 110232 chromium-sandbox_144.0.7559.59-1~deb12u1_arm64.deb 14c8d0062e4bc379e55d7009d3a5c7e6056a9be22bac11012b12d433f03b8a3b 30626660 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb d3f82f0d6ec56babbb88e8c08c813e30d442c3092f4f7e45dea15bff9056d547 52954212 chromium-shell_144.0.7559.59-1~deb12u1_arm64.deb c56e5faeb062b55c2908812601a68a22f1046298ca917e7e5c0d40906af12a0b 30339 chromium_144.0.7559.59-1~deb12u1_arm64-buildd.buildinfo 4d23ae0d98b3a34ae8dd290f5d83c777b97f37d6a78a48f29474305f5333ee64 62202712 chromium_144.0.7559.59-1~deb12u1_arm64.deb Files: 0313807a970857ca47b60f225475c0e4 6228284 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 59d04bb0817265eb336df33cedae0f71 27912440 web optional chromium-common_144.0.7559.59-1~deb12u1_arm64.deb e5548a8f877d358cfd35b8f529f9f7d4 35010208 debug optional chromium-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb ce62e1b38b402d6e7cdee5dabb8eaee4 6514640 web optional chromium-driver_144.0.7559.59-1~deb12u1_arm64.deb 7ad20a4f96909ad6266f17decf7d8baa 28379296 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 8ef77e0818d7f1f1214f4cae69b3034b 48473060 web optional chromium-headless-shell_144.0.7559.59-1~deb12u1_arm64.deb bc212bd32b6cf2777d52e925a24fa34b 20252 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb a388559fb2c5c786f665761801828ef5 110232 web optional chromium-sandbox_144.0.7559.59-1~deb12u1_arm64.deb de0794c1b54dbef1306216b0ad373ce0 30626660 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_arm64.deb 755c236ef924738573067ae8684011a4 52954212 web optional chromium-shell_144.0.7559.59-1~deb12u1_arm64.deb 03ee501bcfb3e09fe7362f173182f6aa 30339 web optional chromium_144.0.7559.59-1~deb12u1_arm64-buildd.buildinfo 19ad0ea5e24a4e998ac731a08b247e48 62202712 web optional chromium_144.0.7559.59-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmln5lYACgkQS/ZIXkV8 oLBGog//SIoEOHGMpLhtvx9VcrPHyM0+ucqai++SnLSr9R3bAZUZbgNQcqnutapG UfDdaN8FtXLh6bHWKt5db79fssSRZOt+Fe++dvF3kYzIQS8LamWXdYyxfOLSVNZk 0f5C9WOGbAoemd/7Vj7kSnEpUuolcoooBkvexwBBxA6rJil9mkr3znuR2OAS87rB 2cx2TKafo3OdK2Ds1rDcxPU8plv0zK1AtBXNKZpA6PB7/AAmu2Hmaeg95ypwqLxw OuYgjsVaAqLbVqzlTHiOJy86+/W3BrPvFOevZpcekG82uK5YyKSbm1MYbUfBJmyG VTEVtFmffKGrhtDk9ibJE2p7UBbUuQAWgsfQ9QlCRA93CuQxfXtn8ZUl37ufC+9u f2wsuxQnGu/AHAg29oQkBb1oEueZIujPfO33ZfUpGI40tzfPSgb3rx6Ja7CV1Al1 ACfXPrEQVeo2U5F8PWzSTRKIC/5uZZ9FjE997mGiY/Ov+FhTpracZ1YR7+KVK3yg 2wHRUHI9kc5aeHDmA+XTrmI6xIqpvooFQGIm+FQawXGcv+Dj4rJy34bzWLzUpWIf 5Or8FSbp9LeysGbFJMoKiMTlUy7X3gRsEPUv6RVtCTtM2WiWzB53h2jyF8DcKPJx CrRltuPPL2z2gaNb/5lvPil3bDtpbHtxC9VdwpNHokQ/wWEU0K0= =TzF2 -----END PGP SIGNATURE-----