-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 144.0.7559.59-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: ca0d461f427638a41ed16ef3499495f11b6464c6 5547772 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb bc61047ad354a5edfd6a0d3bb6628c9579f89017 22969708 chromium-common_144.0.7559.59-1~deb13u1_armhf.deb fa3ce66f85c920897fd5d6fe24ceaa16d4a221d6 34031384 chromium-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 0ac180ba20141a9c6fbda83913cdffd0f982c2f7 7010792 chromium-driver_144.0.7559.59-1~deb13u1_armhf.deb e2dd5253d5f11edbe4a76d0dbc615fb502d66a49 26623568 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 695d9bbb5a16598badde223ce9839e16ccf9cb5b 52105832 chromium-headless-shell_144.0.7559.59-1~deb13u1_armhf.deb ca982bdc7eadca4b870ccf5b84234d917bffbc31 19264 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb b5cac2835f04f087e699cfb161260996a6febe34 107260 chromium-sandbox_144.0.7559.59-1~deb13u1_armhf.deb c8585b380dd41dd58740008e2ea30f4ee19e8c53 28930252 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb f8bf7376784ff7c985546e147045c95a1abdc7c5 57034604 chromium-shell_144.0.7559.59-1~deb13u1_armhf.deb cb441f13e903c53d20b19720b1fcb94c7c0d7307 30170 chromium_144.0.7559.59-1~deb13u1_armhf-buildd.buildinfo 9ea3d4728719a33ca554f9b10c799b83e9219a31 68404456 chromium_144.0.7559.59-1~deb13u1_armhf.deb Checksums-Sha256: 8a94a41f8cc9762f32087b52e9665e5ed2102c2a5994900cd0d2d32d519f1be5 5547772 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 59fdc0df226ba0522a5169fa7be04f2f453b48cbd21235a7052d255ac0efbd54 22969708 chromium-common_144.0.7559.59-1~deb13u1_armhf.deb 3e001cd9d582625bd525334beba008fff4c0a8885d56164fd39a4d9e13edf97d 34031384 chromium-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb cfc04f75f288ef72703c2c9bb98282b44e229424e0f6e2c3d545b82302e5cc64 7010792 chromium-driver_144.0.7559.59-1~deb13u1_armhf.deb b5bd9355dc77625ccba4b74b5fcaae2cc49b006bdf8b756bba9da5f11c07c24a 26623568 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 402a984c4e43ac8a91119af089d6e31931c2839a8978e2a9d673cccbf054717c 52105832 chromium-headless-shell_144.0.7559.59-1~deb13u1_armhf.deb 2726767fd90a46766649e212a8c2499bf8a9d668c9f192dc5774c3e1501dd77c 19264 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 4d93bbc9e7432e100f8b85ad774e7c674807537fd5753e7f20ee03a77ce88f18 107260 chromium-sandbox_144.0.7559.59-1~deb13u1_armhf.deb 008bd2f23b510ee866a9ccfc3aef77fce1558b491c399cc1142c1f02e15881d5 28930252 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 9d14890509b3647916a2ea47304cb105169ebb2fa70ed3c1ff242172550753dd 57034604 chromium-shell_144.0.7559.59-1~deb13u1_armhf.deb 86400d91a3daf94ba84a763ea92ce6215566824b15cf71b9337bbb8fbc766d50 30170 chromium_144.0.7559.59-1~deb13u1_armhf-buildd.buildinfo cdcfe443de5bdcb2884b2b5a42b255c3ce186792f8d97dffb638755e09cad1d3 68404456 chromium_144.0.7559.59-1~deb13u1_armhf.deb Files: 7aea4ce12c12d262e3d5b6917b45f44e 5547772 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 0144eeb09b57baa2b18347dc89535fcd 22969708 web optional chromium-common_144.0.7559.59-1~deb13u1_armhf.deb b8b0d781fe85373ff59c4e8f7cc3ecc0 34031384 debug optional chromium-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 5922f992eca3e95817c1c6d7c56de4d6 7010792 web optional chromium-driver_144.0.7559.59-1~deb13u1_armhf.deb 29c57a818f6c5b18a6f15ee6a4d88800 26623568 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb d82273120b67a7523093fcb560230b7c 52105832 web optional chromium-headless-shell_144.0.7559.59-1~deb13u1_armhf.deb 96ae06e3af55792d2821fd7cacf9034c 19264 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 4f9b420ee0c83d89e9ccf79f97196a14 107260 web optional chromium-sandbox_144.0.7559.59-1~deb13u1_armhf.deb ae7cb3e9517c01e7b8a1b04c60ed0f45 28930252 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_armhf.deb 4b8c5b761b09401d7b58075ab1124628 57034604 web optional chromium-shell_144.0.7559.59-1~deb13u1_armhf.deb 96a2e1ce0fce5c069d0f807c27f6cb1d 30170 web optional chromium_144.0.7559.59-1~deb13u1_armhf-buildd.buildinfo 7aec6d78557f850d25095e77b83b94b1 68404456 web optional chromium_144.0.7559.59-1~deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmln+UcACgkQVza3l394 K2BZFxAA2vNeao6JV9rGgRuJlby+tXKKZ49vTmSZmM53vnlJQjxNYHkwlJK3FBhs O41rHa8Bu+DyCj4Mw/p/kci3gH6+RoZ6XUE0q/Ou+1C49uZpmK8tEHH29z5qAV5F kK5n4EWiAfy2k8vT5SHTHgcQIFedyApCRmt95OVq9Np/kszjjiIVvSRlH18rNQc1 N2pym+m2DhAY4o81WHGpg6keWpXNpg5PU8kpWmZhtWDDR3a4+wD0BbXXr8zK1Dtp oG93jEjoaRZ1WuDQQ+pUFvAGtgpw5FStQQ+r7MbehUMMepao2IXzXkkQgzmeJCqL 7RlwDPKVAT0mr6ABbfspjr0L9gTrUqLGdh7D01XRD1qAb6ki/2nG+ak6i+8FownI e8di7IQTrUTyZIlw81pOkwF0TEA35Riy4bEdeCY8pu7D2EJyv4J0V8fNIGQhkInm dRo3dqfFDsGuXVAB15tktGaHFAvHhgPUu7pizrr3PfY1IxCFNhvWkPfKpZkYWAMa nWD+YL/eUThcLlY/tE4nVLZBy2/OM3ugSNsNm1QLSb2758aWdD54gKDtJJbr60rU ZQOOtC03OmKqWsPSGrEZC3dOt8Af7Ys/5jWspSpHg+7PMSAKXtnDh7P+9sFgYP3n 8iBG1uR/70B2gMFDX+dAWb+uMK9y0rXQuZVTxvjkI4jCygUFZSg= =+HXZ -----END PGP SIGNATURE-----