-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 144.0.7559.59-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: 2a9ed450000fdbf5343b626b163d0dec865c6017 5087352 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb b069a4c930feefd5050f9f6ebd3167590aad192b 22982812 chromium-common_144.0.7559.59-1~deb13u1_amd64.deb 715c1d7fc878dfb5c50db1ae8afd9cfa662018e9 31889696 chromium-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 5a30b9d4f1cc4c1b9a37e202075d66a7fe4410bd 7193756 chromium-driver_144.0.7559.59-1~deb13u1_amd64.deb 5752b4ccd8f5fdb6d76a636b07c8e5235ecb930b 27018384 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 113244881af36250f7d7931b59f605eb968bd706 59674868 chromium-headless-shell_144.0.7559.59-1~deb13u1_amd64.deb a699f7e7f52f7c8673c52c388998f9432cfa01da 20212 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb bcf91293b4ba96069b9f39fb2f1fef446d3d2ae8 107608 chromium-sandbox_144.0.7559.59-1~deb13u1_amd64.deb 63fdf4dc1de8a0000b5e88945e9c8cd822ffc08a 28654120 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 00b2e79cf96cca133b4a86d15af03453a95ca522 59046444 chromium-shell_144.0.7559.59-1~deb13u1_amd64.deb 5fc8b40c674a910bace8ac280e195f658288ac16 30295 chromium_144.0.7559.59-1~deb13u1_amd64-buildd.buildinfo cc269bb577ee0aa51ae4e6c18a117995f74d791e 80564596 chromium_144.0.7559.59-1~deb13u1_amd64.deb Checksums-Sha256: 361ccc9e335af05147fe50017852f0327f30c9daceafd244c33d6f471d1fcfde 5087352 chromium-common-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 9743e99f82f727fbd46c6d6be6e16633fa469471b4c75818181d651b7dce4e65 22982812 chromium-common_144.0.7559.59-1~deb13u1_amd64.deb 2ec95484c6f7b2509e5c5601281d393761984db6678d0950e147e79cd8814e14 31889696 chromium-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 38b81f1cefec094bd996beb1964336fed0e42b2b3df07733b8940c596516e7f5 7193756 chromium-driver_144.0.7559.59-1~deb13u1_amd64.deb 9398d4038cc1013b920bfc646adcb135c993a7b7e6050ff46b2e7075fafb7757 27018384 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 6d8100b72fa2b3f8287020bdab621db78770e25d3c4e2ce2a1b5cbb35d7452da 59674868 chromium-headless-shell_144.0.7559.59-1~deb13u1_amd64.deb 69da3986aa8a8cbb331d50b26f3f61d89d3444dcb0ed418b8a21f4c765733e7d 20212 chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb faf784758e505ed2f5f543814430165fe1720fc483feb0bf21cc4411e3810b2b 107608 chromium-sandbox_144.0.7559.59-1~deb13u1_amd64.deb 96aaec0ce5105f058b0b1ccddf85f316080b462929c0c79d90fee9e40621f617 28654120 chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 63d4139a11b5fc8708eb9e88c4200ac281c7856fe0c1eafabba3760a6dce9269 59046444 chromium-shell_144.0.7559.59-1~deb13u1_amd64.deb 975edda605a82f699b882cbbdc4abab8a09c916eb9509640dc7d56baa0ef2508 30295 chromium_144.0.7559.59-1~deb13u1_amd64-buildd.buildinfo 0359968bd4daef394043a77a7298f7da698c0386bb9798b36c9432a0710f20d2 80564596 chromium_144.0.7559.59-1~deb13u1_amd64.deb Files: 6fd0dd77ec14aa97f4886b325ab78d5f 5087352 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb cbd906dc8d92b22b0a96163917093fd3 22982812 web optional chromium-common_144.0.7559.59-1~deb13u1_amd64.deb 2fb98d64f95a05b42a28e156592e0b59 31889696 debug optional chromium-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 3fd9a46801ee99584544cff32d11b498 7193756 web optional chromium-driver_144.0.7559.59-1~deb13u1_amd64.deb 202b451d544b9ec54b36b820cefa5ad8 27018384 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 172361758ec56c622e5c322a740752ef 59674868 web optional chromium-headless-shell_144.0.7559.59-1~deb13u1_amd64.deb fd98f774f6475b3127af141e46727f9f 20212 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 1d706cabe32a2874bdc552fc689f2c52 107608 web optional chromium-sandbox_144.0.7559.59-1~deb13u1_amd64.deb aca0f8a1c529b454f748770010a172b6 28654120 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb13u1_amd64.deb 8c3d4b0ccfe184af8b4e2c26814bc1d8 59046444 web optional chromium-shell_144.0.7559.59-1~deb13u1_amd64.deb e4fbecfe6b1a0c82ea41f7f44c006a44 30295 web optional chromium_144.0.7559.59-1~deb13u1_amd64-buildd.buildinfo 6db7e00ee85ef371f7c9e72d5eb0df8f 80564596 web optional chromium_144.0.7559.59-1~deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmln++EACgkQEbCLukZn 24p6Uw//fjtx2q9r9jarwgg8iTbpP0tecIJS8OQE4FNcFK4AZYPAeVg2IjXXqu5k GBF6ECAfso7MnJdBK3rB6mjF/JNTDLDnZZIiaGjvvULxLbagRQp6qWgKSy6xXeXT lme3KJAoMfOXDXVoACqYBb09GlZmhATRzql82pmyArn4IIQ9mTsMnhQBGTmceN6S DekmjTPrl7Ir0/sffNHTrRL3AtF2+XTRzk3bZhYTENI7q+QQC+vBGdZK3+CWaMo8 BKqDog7mvTdjC5JKIQ3E4t5unStwbnPYX2fVI6f9sHLLgrDSvBDHFEQlPXByovG5 Xms6aAsDlA85L0z4+DeLcQmDfw4F7k73riNMAsOYpPhqxym/6VAYZAdMjPxTrUrP nDf3qH5ba8yFkLMCKqCIABprxI2v2uutO4YxFKLPwITSc2Hxd9eefY1zCnlg5Ojv I8+9bGEQjNhc2rvMKHmBwDxr0I6RRkuDHz+cbgft7gh6uB6mBR6QiU/HRhJP4mml cHatS1/hOOVPIMyqyaUaflY/rm4exKIAqb1HbXLy/tr7fSH3Kd3Y3YueDwQqlDwM zOfG/a0pBWcKNc2Liwh9areNWGYGhVWDRa1+rz9prhHCsCITPTB4i7hgwNptn/Qw p02/hIdFJU1mhc7kZ3GheJzacQNEbnawQ0NEkDddUDRj14+fpGc= =adxL -----END PGP SIGNATURE-----