-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 144.0.7559.59-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: 08c3162c3a9499574ca167cb2f801b9e40246b4f 5144760 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_i386.deb b9f9a13e8d86bdb84469b0b83a794f8f70b83e40 23194988 chromium-common_144.0.7559.59-1~deb13u1_i386.deb 4800ef08ab5a12f4933f784c6a6daeb6321c3528 34538572 chromium-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 7a135f155e7afa86520fc9c0359efe17a7554c76 7661268 chromium-driver_144.0.7559.59-1~deb13u1_i386.deb d01cee069db43fee2f992cc10534ebdfe641c47a 28586340 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb d78d5c3e819308e379c0d6ee013e7d4db9bb2961 56610136 chromium-headless-shell_144.0.7559.59-1~deb13u1_i386.deb cc0e8cff0b5a5ced7356a7bb04ec6d5cb50eec31 18984 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 7674eee8d0b52d635b622cf72c434fab2ec13699 107472 chromium-sandbox_144.0.7559.59-1~deb13u1_i386.deb 5aa909fd79242f9e6d7b2e3464e8292e295c0d16 31366520 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb e0b5c92853fa8d3923de80a3e7e64ad0d7e3b04b 61786080 chromium-shell_144.0.7559.59-1~deb13u1_i386.deb cb04c9dbfc3e8a90914bd0ba5758a4efd9135398 30217 chromium_144.0.7559.59-1~deb13u1_i386-buildd.buildinfo c2635680ab7d18e1f644678e11d097bea45e404a 73972512 chromium_144.0.7559.59-1~deb13u1_i386.deb Checksums-Sha256: 26c3fc17f90f09b9f09b0b58dc1d689aec05b2a4605d488b7b9ed08889f47764 5144760 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_i386.deb d99e86a718098dda2d5149b7b53e3e5bad08964849dac8dfd94495942046a188 23194988 chromium-common_144.0.7559.59-1~deb13u1_i386.deb f9e705f3cfb33852dcd731531170a7a53f7cd20381efa807af5926de2dd862a2 34538572 chromium-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 8f7ef467fc050432a4432e146649f4cb8ef83a1dee0bffad7017c958bc79bb58 7661268 chromium-driver_144.0.7559.59-1~deb13u1_i386.deb 94a73f985db5ad3b370eb1b9ae2f1c2650f0750c29e7eb9cb0e30bd6d1b190cc 28586340 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 4b484d0b49f7bf936637049e44748e6d276e2ecd3d0e3aaf0693adca404bb16c 56610136 chromium-headless-shell_144.0.7559.59-1~deb13u1_i386.deb 25b582483ffec3336865e827fd67a63f6dc33929682cc7263800cdebfc26c486 18984 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 83551d7aa62e9339d8594e7688a409df0346f90167faa4e6657089d9cc7668bf 107472 chromium-sandbox_144.0.7559.59-1~deb13u1_i386.deb 5ee2db70e170a83a15cb3d897d9d4784a8c9787c06fa4eed078c4741cfd36b56 31366520 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb e2e07299a769bdfe481170d72e4dcb8fcb0a8c9aee532ef7a31a33177e42e663 61786080 chromium-shell_144.0.7559.59-1~deb13u1_i386.deb 1293be75438bafea01e3ab40748d3f542d6f48473fb2696c1804fcfa1989c3ae 30217 chromium_144.0.7559.59-1~deb13u1_i386-buildd.buildinfo 8248eb430662a50d9e618224b37ee7b5ba8c3cca96f69ac1b9351fc70fb05991 73972512 chromium_144.0.7559.59-1~deb13u1_i386.deb Files: 221e7a57147e3c9531976579b0441255 5144760 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb13u1_i386.deb ccca4cc495aef7437a98d89d1bf80fb5 23194988 web optional chromium-common_144.0.7559.59-1~deb13u1_i386.deb 52198cbb3f490c54e89e62f8f7fc6a72 34538572 debug optional chromium-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 95fbb8a46d6185238300e493ed1f05eb 7661268 web optional chromium-driver_144.0.7559.59-1~deb13u1_i386.deb 94116a6f74a2cf36de53ef8c570182fb 28586340 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb f89b9311f22d0f854fa7528a5ee615da 56610136 web optional chromium-headless-shell_144.0.7559.59-1~deb13u1_i386.deb bea966e1025e83cac480e69c4c45eb5b 18984 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_i386.deb b30ddbeb771cd340aba6399b9b879bb4 107472 web optional chromium-sandbox_144.0.7559.59-1~deb13u1_i386.deb a55df88832b4ac46a09ace54d752c255 31366520 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_i386.deb 0a9694e4c417926afa8ff74c6fdd70ef 61786080 web optional chromium-shell_144.0.7559.59-1~deb13u1_i386.deb 910207269624928fb9ecfd2dff7be599 30217 web optional chromium_144.0.7559.59-1~deb13u1_i386-buildd.buildinfo 704487fef0d167dc52965fe940f75a6c 73972512 web optional chromium_144.0.7559.59-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmloHNkACgkQ8IREj/cR iTMqwxAAw2Ju4GVz08a2nmgrOFpaVXM4tX6IJNxmWj3sA+hiLeuplGfBVnpJRj8M URdyZKH/mmM5F9b5xiydy0Ss447PXXdFHKelDNIdjPpwIzUgPCluTXSiR/qOUmeN 4YzAN5Y2a7U2M4l0sx7a34p+j7hiD4+xHav+B84fLFqQx2ImKuzttHor3Hw/KqB+ 5wrxTFQtA9ErqtPo9qmTczy3sNSxEGpBVSO+GsWKy6/pNX1tpKd24pt428PJhJ9w +3Zv9etnQEIJr9gEnDOjDeloRntG8b2drYLOBD4Bu9LKKFtnHvax9OFRLrrCb9KA Zf1CTfx27zWdrB4nlEnEDKSbKOops0uf/A6g/p6pDbvOZkKjaUQSx0Q1x8lO4RPn nem+siFuY6IvbglyqDbeQEciuRB/KYAvm8K9uotUo+T7XTw5/glV0k0hOrpagnRl gUNMWRQw31w/9ZkOXTXE/NaHZJ8DsucbGSom59DIUP4ArLPzKuK04Le7mYbTBayC QSLLDvSPfjwoR20vGM9BnbcJ+Ukym8m04648gt3YEtq8o4LyYCBbmluWgYtIi916 R9IvjVSkEIM1yM3tSnT21Ci5wq5pjdpWx1M4JeqxdH85xIhJvuJe3kFsBFeYn7wv Pv74XB78AJFY/2RmghtFZg74Xo4enZ6gblG5nDic8fZAr1D8rVQ= =izbQ -----END PGP SIGNATURE-----