-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 144.0.7559.96-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.96-1~deb13u1) trixie-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: 8789cdeb25de3d7be1f5bd05fb35428af256af4c 5145444 chromium-common-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 3c672d9841d6680a33c6764e148324f724536f96 23200340 chromium-common_144.0.7559.96-1~deb13u1_i386.deb 9c695c9940d608ef6b117efa6edceb4c529ccd2c 35204256 chromium-dbgsym_144.0.7559.96-1~deb13u1_i386.deb a01e874038882a304a2e571a5b8f5ecc8a6487fd 7663976 chromium-driver_144.0.7559.96-1~deb13u1_i386.deb 68e6d3e389a349590101c9d1ed85b767c5d337a9 29212956 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb a7cd42aeb886f1444a6eb6dac9ecd4e3906e73f9 56735800 chromium-headless-shell_144.0.7559.96-1~deb13u1_i386.deb ea94fc73ae2458d15521e340368b36ba6a1cc7bb 18984 chromium-sandbox-dbgsym_144.0.7559.96-1~deb13u1_i386.deb f9430fefc921b18264f0f1e8b24994835603a2fa 107668 chromium-sandbox_144.0.7559.96-1~deb13u1_i386.deb dc77d2e72751de3a3b9affad9f29ce8bb7a96813 31997800 chromium-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 05f93c799da13b0a7b2cb280a056b1bc4bb624e5 61891744 chromium-shell_144.0.7559.96-1~deb13u1_i386.deb 9290520815ad00751cde02007e256849a19d2e69 30217 chromium_144.0.7559.96-1~deb13u1_i386-buildd.buildinfo 2a6279c1f4d23f2f43df7c19d4700684a77f3781 74081276 chromium_144.0.7559.96-1~deb13u1_i386.deb Checksums-Sha256: 9036abee909e5656ac71764557cace48738b078411eede3e0cf49271d07452be 5145444 chromium-common-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 28623e54ac732a3e2d3e05dfc0c51b0ff01fc7e639c52356243580b250b7b4e0 23200340 chromium-common_144.0.7559.96-1~deb13u1_i386.deb de3211c0cdbde23d502fa75bcf31bb3a9ad84243f884240f0ad669da5260a4e3 35204256 chromium-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 26e10148fe8f739ff277c068669d9c783b7401bb3f6ac67051643f4528fa0856 7663976 chromium-driver_144.0.7559.96-1~deb13u1_i386.deb e22d3cb52e020e57bf6303002115fa8aa638dd4f642adde77a45fcbc772d57bb 29212956 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb db9900417ca39b5104c7cdda843e24cc160cc0b687caf83fb0a500d5d091d60e 56735800 chromium-headless-shell_144.0.7559.96-1~deb13u1_i386.deb 6537cc1bb28587fd62598f37bed2f9a964bfb73a6a9740f3da825eaa2b8d24ce 18984 chromium-sandbox-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 95630bd39c3e74997f7e8f3e7a2216eaa07eafa8b380d319a6b9843ae10050cc 107668 chromium-sandbox_144.0.7559.96-1~deb13u1_i386.deb 2cb04ef68959809782c81a01f1ea88f39138d9586ba804c9ba75f84cc3e5caca 31997800 chromium-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb cd1009fe59193a8c9447a53040f5eeb4da5d31611b38ff1ca601c21f9f55c6fb 61891744 chromium-shell_144.0.7559.96-1~deb13u1_i386.deb 56b5517580964a51147c7734605ed783880f8dfed94ced5a977a060fe2ace7f9 30217 chromium_144.0.7559.96-1~deb13u1_i386-buildd.buildinfo 0d072ad9a804581a23c91e619d353065c3170f86c038fc1b3ee6975ec2b6ced1 74081276 chromium_144.0.7559.96-1~deb13u1_i386.deb Files: a3294958d7cd867cd6dee6e4f6bce35a 5145444 debug optional chromium-common-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 1d38472ba8035b05454ca41f91f12fad 23200340 web optional chromium-common_144.0.7559.96-1~deb13u1_i386.deb 83224c6bce8fcb6302dba86cd9f2457c 35204256 debug optional chromium-dbgsym_144.0.7559.96-1~deb13u1_i386.deb b0c1289bcfe4a1b84f1f72f753e843eb 7663976 web optional chromium-driver_144.0.7559.96-1~deb13u1_i386.deb 340df108bd74933442f8b9c3fb94ab6e 29212956 debug optional chromium-headless-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 45b27717d610ccc8ec4efbb6704e4d85 56735800 web optional chromium-headless-shell_144.0.7559.96-1~deb13u1_i386.deb 8e514c0bfdc8b287c188c74d8eb96fd9 18984 debug optional chromium-sandbox-dbgsym_144.0.7559.96-1~deb13u1_i386.deb bec04d1f2cb7584cdb370eeb00b9f7ae 107668 web optional chromium-sandbox_144.0.7559.96-1~deb13u1_i386.deb cc105d8597057c5aa4efdb1bc35b4a02 31997800 debug optional chromium-shell-dbgsym_144.0.7559.96-1~deb13u1_i386.deb 5de4f73eb54b457123163f3bf3ba97e3 61891744 web optional chromium-shell_144.0.7559.96-1~deb13u1_i386.deb 7dbe6a9fb4eb44774f6ceedeb7e7584e 30217 web optional chromium_144.0.7559.96-1~deb13u1_i386-buildd.buildinfo 99eb6a7b6451e1fbca8582a57562058e 74081276 web optional chromium_144.0.7559.96-1~deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc5vuvf2HND40bnI+8IREj/cRiTMFAmlyDGMACgkQ8IREj/cR iTN0Ng/+NCtJImkTFSYGp3BmOKr9fbIAM9n5Go5wTRfOcMB7bEHxGKzJ+9mveBDa fTbB7+gXfz0eKWaY/vdR0EhLGqJeiHHAZgxvrZDz9hsVlR0HPuvHAiOVyKWd1iRS wI4vWVeKokGQPIH8wZ0E2mewJCtrMf3lFPF/tfIPbT37SpAInZWDPK3wGFbfTpGe yxtmQ18GDgUBqL3e54d0a0FfPp0Yq1lNIe/ZkCaNgbss+WOg8j5u6pfyH4Z5clvh 6GIIGJMbYmGUkT+PKSJG/38A5F6AOw1chdEXTnaSwrhD/tC83XIBrVqTcQ5OA35/ IEuAVuOQSTUhAmlO0tnEk+ilcqFyiUSyGgaEm1i4H4EL9++yT38h0sZsv7IaFZ+Z SWohC9gGrLxQtrr38HybqkB6ixDR7fLqSOiLHqq4hPbXXDettTpZ9ry8TNDZ+Nd3 JdTm7kr4evlIY1SFKgeyiobz7CL5edjS+5CISRgvGkf0pvF2q/XfZvXruijxCuAc OT765aB9qN0uyCXN4yjL6BPfC88W/CRkAcZCt7iIbYJlSTZstpDu31lve261AP/s 70P32vSCKY02cLyvlw3gh4rT0uMLIyct8HH0j08mLw2DFZhe5YCmXqrqhKggbkue ku+9/Mrk0BFgP8JzbwNhO/+apjUHhHHEtfyP34SjeifkFWB8QEY= =9JCn -----END PGP SIGNATURE-----