-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 144.0.7559.59-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt-web as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. - bookworm/path-rustfmt.patch: add patch to override search path for rustfmt (which chromium deduces incorrectly due to our bundled bindgen in bookworm). . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. - bookworm/eslint.patch: Refresh, and add another import.meta.dirname conversion. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: aa96a5bc34729cb1db78c695507ce456e814225c 5536476 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb f592ce8e5fcc4b262ddb96fc7f63d3716149ef80 22966252 chromium-common_144.0.7559.59-1~deb12u1_armhf.deb eb17856f2909b1933141420cdb8b92977d248ddc 34027272 chromium-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 3bf9246cbfa8d02391e8379efd4c7404009d145f 7012992 chromium-driver_144.0.7559.59-1~deb12u1_armhf.deb d4f9d1597fb212a41de0d2ca8cbfdd7108d023d0 26606564 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 8afc06ab14d21e8f08d256b2da1a09800428e964 52106584 chromium-headless-shell_144.0.7559.59-1~deb12u1_armhf.deb a87745a69739df9882bfe93063ef8ddeb566a3f9 18000 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 55275c34b4220bb02781f04c45037e28bcb65873 109148 chromium-sandbox_144.0.7559.59-1~deb12u1_armhf.deb a39726c510ec134eb11baeaf7f947410171bf2af 28930580 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb bf46d72fa5be761763bfa7eea24aa3649517b180 57022700 chromium-shell_144.0.7559.59-1~deb12u1_armhf.deb c1a3d95bcee92d37f5c4ccf602dfce4c01d305e1 30249 chromium_144.0.7559.59-1~deb12u1_armhf-buildd.buildinfo b0b62dd0dba8ce3dec43dfefcb3b3a423a068251 68392580 chromium_144.0.7559.59-1~deb12u1_armhf.deb Checksums-Sha256: 46d55fe030b538addada5fe158efd51b4296e2a91c304b28d24eee0e4bb22645 5536476 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb d834b78a83ca7e8754849f9f7b231f8ba5de97b1449a21cd0aeb4988061e105c 22966252 chromium-common_144.0.7559.59-1~deb12u1_armhf.deb 800ee40d125cac0347d24a923727c3a48eafe226af564a17c440c57b182c6f36 34027272 chromium-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 4871adcd73cf6d401814b2dad07332e8cfbb343ad1214044fa88413df757c175 7012992 chromium-driver_144.0.7559.59-1~deb12u1_armhf.deb ec5d6e1704d84f2db0a47bb356cab53ee95a703dbdf1810a90b91b4ccaf4b0f5 26606564 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 1a83b8bcc9c0e94976464d14514389455ed51cd1f7c9737eccddc6d4ebae46da 52106584 chromium-headless-shell_144.0.7559.59-1~deb12u1_armhf.deb 913056def43347a90f71d8a7d4d99e7e59a319b797f24364d9d829bee68f43e3 18000 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb f4253142b7829e6ca672a9a70ffca8b26f46ce6ea1eb8338030713b5ff669aa5 109148 chromium-sandbox_144.0.7559.59-1~deb12u1_armhf.deb 7962151f2712c9ce915a2d06216101297353b768a8eb6ac0c8bd68652554a475 28930580 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb e9af4f10d00cb209059dfcc4e52c4955c07377fd52d58c65a8044c48428564eb 57022700 chromium-shell_144.0.7559.59-1~deb12u1_armhf.deb 420fa22584621799c082872481a3e8182e7022398aa1ce094c234b993533a7c3 30249 chromium_144.0.7559.59-1~deb12u1_armhf-buildd.buildinfo 73a857a7276afed9eb9aec739740c9bfa2ca7589a9e9f898a4d6248491682f0a 68392580 chromium_144.0.7559.59-1~deb12u1_armhf.deb Files: 37866689a1a63c272d4bc0926e61e5f8 5536476 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 4e4c5c9d46378c508f066d7b3965a8d4 22966252 web optional chromium-common_144.0.7559.59-1~deb12u1_armhf.deb 314989aefd2de46c70560ef0a0fa151b 34027272 debug optional chromium-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb c704aad2efbd9bfc35b5b32d9913cdd6 7012992 web optional chromium-driver_144.0.7559.59-1~deb12u1_armhf.deb bcbd6ef34d11c5314bf02f02ef9da0fe 26606564 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 375a995aff3b9d535d647861dc67cd4c 52106584 web optional chromium-headless-shell_144.0.7559.59-1~deb12u1_armhf.deb e2eb42b81dee5fd14db03dee11640eb4 18000 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 89622e64783be0f6df3386b8ba0c1858 109148 web optional chromium-sandbox_144.0.7559.59-1~deb12u1_armhf.deb b0209e0785dac49b4820c99e8f8adb36 28930580 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_armhf.deb 4357f50d68dfe3b7278e50b67e4aaea4 57022700 web optional chromium-shell_144.0.7559.59-1~deb12u1_armhf.deb 5fa25d34c23603ae51f9bca5a154d12c 30249 web optional chromium_144.0.7559.59-1~deb12u1_armhf-buildd.buildinfo 7fb4cdbefc3923ad003d5731745ca06c 68392580 web optional chromium_144.0.7559.59-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmln3tgACgkQScpU3dYu lLhu7RAAny+lBoME2yVUB49fz/RQMrtQJ1uosOFeVLPegEQEikVtGe9+E3UtSxAj PFqNBrb5e3AKAFBw9PzAcp038uQ+IlDySeqDtd7XgpU/dggeRseutYhGfRMOuA9j SS5SzTXftCwrW3jhYCd2lKbnKH6yDHWYggPcIbGIGUoKw99TzEz2tcowBkano3z4 Y6TDu/Suf42gL7Wn/HsnY32uMXnkCOf6wJ1XJyfqOmqB7u9861yKRC1QKLV6tdY1 buXugwHm7KBDHKfKDtjuq11bU1B2u55qXB+jpJrAiNdXL1sU8OjHCn+RTL95WGPE fNNSkE+JtQAcVvTssFkgWVAQXsDngSi3y1bmjmqwIEyubhDuxqGE58l+SS/uGsYG 98Z60ZitxltEFYghBvGOnT2ft/AyF2Y1ZAO9NQfz6o52YOiO5javPvrqypt8rYyC QIretN0XW4QgmKiUubgiBEAgbl/wxdO4wvGCJMe8/DEmr+xcUog1+ee2+qKxuLr5 lwUm7/jKNFVH/125vV186U+732HtfcqYYA8p5ellb2S53smgCcugx19A7v5gQCBu DaPbN0tk4CJmVCDIuE2a/sdfZhD/m48FNBc7Ue5XyacVRfg0F46IbR05PPTxZ1Zo //BvDAiFwluoO/PJHad/BCpKJk2ybionJLeqaq95iZ1hOPFn3eM= =DTzl -----END PGP SIGNATURE-----