-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 144.0.7559.59-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: 09bc6fe09b5b3773bfdfeb151f674a86c334de34 6042216 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb a2a602f463f4e8fcdc2561f4f5c59f82c70c9f53 27739368 chromium-common_144.0.7559.59-1~deb13u1_arm64.deb 2c1655ba8baee3391b44d6749e7ff174e9d4c1ad 32397768 chromium-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 3e2edc0da81d0b57c4d6e67ddb1df753bbbcbcc4 6433024 chromium-driver_144.0.7559.59-1~deb13u1_arm64.deb bb7263765114bd24bb251cf859913c284323e9e1 26949948 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 3e99ba279e119aecd4ba9b36f67a9d276451798a 52027544 chromium-headless-shell_144.0.7559.59-1~deb13u1_arm64.deb 6c962e27e28486edbb5c707d2ae3eafd943b5d31 21084 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb ab5835735a0bc3a988c734a383dcb67f5a4e5862 108368 chromium-sandbox_144.0.7559.59-1~deb13u1_arm64.deb 00d58089ca38cf1723b21bc2f202a428251d08b5 28442164 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 3c67abe8fa8486086fcbec148cc12188d4794fac 51784728 chromium-shell_144.0.7559.59-1~deb13u1_arm64.deb b4cf029c96fcdad6fabfcd9a4225976e714d5ad7 30264 chromium_144.0.7559.59-1~deb13u1_arm64-buildd.buildinfo bf375f34fd36148c2380a496947f4efc74e25b4c 69610252 chromium_144.0.7559.59-1~deb13u1_arm64.deb Checksums-Sha256: 70c30b7bfaa95946ccda4707e25337c372f70e85c06065bf8c25d9c46a94113f 6042216 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb f56a4c171128c5814c979e54838d5be9adbf29d1da14c9eb546728fe09fca434 27739368 chromium-common_144.0.7559.59-1~deb13u1_arm64.deb 7a12847a67bef032165d0f881f778016a9408353b8b38b59f88abbfd22583121 32397768 chromium-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 8bb5c72040a5f2772c33a3c864d360cc568542a3d9fe089a68f03e53c4379c8d 6433024 chromium-driver_144.0.7559.59-1~deb13u1_arm64.deb b00d66535b9193bfa460d2f67ac0cc7024c815ed1261462027bfa500dd23e410 26949948 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb e751966ae06b36d8b1e3db2e2ed3299b1f667bd039b58926882dd390b19347cf 52027544 chromium-headless-shell_144.0.7559.59-1~deb13u1_arm64.deb 5b29c6080ed8feede7e9538a07e7bcb6ab192179129f2118c6da8cf2587cf35d 21084 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 4fe04bab0508e59a4cce69d5491a20f9371aee883620b251c6c973eb838f663a 108368 chromium-sandbox_144.0.7559.59-1~deb13u1_arm64.deb 613f07e7c134729cca36f08d2a02c916dee1526136c4bf904f40062f11a32cb9 28442164 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb a09b16885dfbbbb388acd90a7976fb1c1dff49569a5628f1cef98d5da35efe3e 51784728 chromium-shell_144.0.7559.59-1~deb13u1_arm64.deb 87dae638ac55dc9088f0a4b748bc914f8ff2a317b6856a83774ff68067d6f2d1 30264 chromium_144.0.7559.59-1~deb13u1_arm64-buildd.buildinfo 5e547162ea2f6542f0cb43d7278cbeebd6da80f1ab652d55ea17f40b44476917 69610252 chromium_144.0.7559.59-1~deb13u1_arm64.deb Files: f98d41867140c7c6a9c95cd9c81d522d 6042216 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 504dd7e664daa5298961aa9520971403 27739368 web optional chromium-common_144.0.7559.59-1~deb13u1_arm64.deb ce460786b69885c7657855481ca447c1 32397768 debug optional chromium-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 77140e17b8b3559be09fc75c08a3bdda 6433024 web optional chromium-driver_144.0.7559.59-1~deb13u1_arm64.deb f50483ef1382c593cbc43902cb7a3dad 26949948 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb a174b81ab234cf2a20214fe88824bae5 52027544 web optional chromium-headless-shell_144.0.7559.59-1~deb13u1_arm64.deb 921a0f4da6ea3bb13fe1cb7ac66295e5 21084 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 2e66d4947dc75bb95da9f1685264537e 108368 web optional chromium-sandbox_144.0.7559.59-1~deb13u1_arm64.deb d727830f747f2c7896de5097a77b0e29 28442164 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_arm64.deb 3f29c26bbb61bdf5af8b1f21412f2f30 51784728 web optional chromium-shell_144.0.7559.59-1~deb13u1_arm64.deb 28d138eabbcb50f238f789b57977b6f4 30264 web optional chromium_144.0.7559.59-1~deb13u1_arm64-buildd.buildinfo 550f572c13d9bb4465a0b187a1d67941 69610252 web optional chromium_144.0.7559.59-1~deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmln9pUACgkQCr/D/stJ kDwAshAAp6TFT+z/tLG2eRqDWosf/1Vwuh/2B603rbqivSWSn/vOLWjBcOOmtKCV 1PHjkLsRbjxwLb/XgEh3FIlA54sBrU3rEdu+p31TF9ubc3u2aD8+FXX3WSdTn1Ca xOxnlmZ6MiXXqYQAbEdRwhdSs394BtcU7nIL8MSWIedjDofaSqRLscg3pUV/Jd+Q EFKNbq2tJE01zI3dUhwzka7emTtX6CKvwVwbE6Oq4MxFHOCm1NvWUkDi0bueEpfl 6lILyd7wxXNr8MseGPnF63eRiQxzuXLSkXYNIde8YhoK/uX5y78vVwg2h+zECz7t Gsr6L9CBvj6mZr1SMOiRRtTh8C1QJHG2GN3BxA/lqtW1Cinu32WXE50dodwFXko1 QzsDFN4pxX8hFraOEwZNTOleuzdU8RaONS7vxc1eVehOPDmV8QNjVqAPw9eY2zU4 fNIalQhfCFY+evr5DsMrrFBPEOBjcr8xLRmkoqVntorEGKX7ORHkou79MWJzpd7U Waa2vvJW+c8b+veInSF7lHxTS6hnFWq5xj4WMIMAhKvSSHYtIwOcKfNehItTxgHA b2JvopHa/bKpSHbSr2W1pIMEHBca+FfPrtsb5onMm5Q+kIHKxPxz01/CRax7dmvA q3NX7RuC1HJzISEaMqH3UXJ3FPh+bJFuZTMax4mZRg/ba5QwUHQ= =vtIk -----END PGP SIGNATURE-----