-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 13 Jan 2026 22:11:21 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: ppc64el Version: 144.0.7559.59-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.59-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream stable release. - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745. - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google. - CVE-2026-0901: Inappropriate implementation in Blink. Reported by Irvan Kurniawan (sourc7). - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3. - CVE-2026-0903: Insufficient validation of untrusted input in Downloads. Reported by Azur. - CVE-2026-0904: Incorrect security UI in Digital Credentials. Reported by Hafiizh. - CVE-2026-0905: Insufficient policy enforcement in Network. Reported by Google. - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani. - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh. - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th. * d/copyright: delete a copy of clang-22 in the openscreen build directory. * d/control: add rustfmt-web as a build dependency. * d/rules: make DEB_BUILD_OPTIONS=terse work. * d/patches: - disable/tests.patch: refresh. - trixie/rust-sanitize.patch: refresh. - bookworm/bindgen.patch: refresh. - fixes/force-rust-nightly.patch: add workaround to force rustc_nightly_capability, as we're using an up-to-date rust. - trixie/value-or.patch: add clang-19 workarounds to help calling value_or() with ambiguous values. - fixes/autofill-binarypb.patch: add patch to fix build for us stripping out binary-only files containing city/state autofill aliases. - bookworm/path-rustfmt.patch: add patch to override search path for rustfmt (which chromium deduces incorrectly due to our bundled bindgen in bookworm). . [ Daniel Richard G. ] * d/patches: - trixie/adler1.patch: Refresh to follow use of if-else. - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2. - bookworm/eslint.patch: Refresh, and add another import.meta.dirname conversion. . [ Timothy Pearson ] * d/patches: - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection * d/patches/ppc64le: - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from upstream sources - fixes/fix-clang-selection.patch: Drop due to upstream changes Checksums-Sha1: 90a8f32966d117bca05d343d6ea5f609d8d0f017 5972624 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb fd16a99b3b1f32de9094d706eabca93b1b4633e8 30046400 chromium-common_144.0.7559.59-1~deb12u1_ppc64el.deb bca48e981312ccb6553255303222fa805e9cea84 30538500 chromium-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 5a53bfc08727f97141c1f29a657017142041c7b4 7496764 chromium-driver_144.0.7559.59-1~deb12u1_ppc64el.deb 865ffd21078378045865d905e12655ca66c4da31 24310056 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 3cbe5e821b91753fc89b55f2d4d132c00db29496 53800460 chromium-headless-shell_144.0.7559.59-1~deb12u1_ppc64el.deb e739d29e737dd77fab4883c2b1db8d546f04d062 19268 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb e1b98fca63d881145d4c0e5883776c4ff5c798f5 109632 chromium-sandbox_144.0.7559.59-1~deb12u1_ppc64el.deb 6a6f85f29e3bce2db0a9f72ec083a40e0aecea95 26384452 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb c23923042273d5982317ae26c5558f76799f6721 58708892 chromium-shell_144.0.7559.59-1~deb12u1_ppc64el.deb 5b271eee722b5f7a487ec0bdfd9fc0792b3ad5a4 30285 chromium_144.0.7559.59-1~deb12u1_ppc64el-buildd.buildinfo 243c9e47aede409e45d94b062833da07c41d0c08 70697116 chromium_144.0.7559.59-1~deb12u1_ppc64el.deb Checksums-Sha256: 57611cd09db92de20eee037a32319d8c1067b4b1d48acadc8e9e78bf7f0b0cb2 5972624 chromium-common-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb a11dbc8bb2b6eb21f0c4573b8b6aa1b03a8fe9cc4e01064a0a0bec03f3604e23 30046400 chromium-common_144.0.7559.59-1~deb12u1_ppc64el.deb 63a634e0a404220864a0c961596b7241b01d3a74737f98c8db5f524d1edeb37a 30538500 chromium-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb e685eaec9d8b8345162150e267a2ab7864818659a2f36368b153f260fd99476b 7496764 chromium-driver_144.0.7559.59-1~deb12u1_ppc64el.deb 828cda9684e24874032cb36b24b2a93d193144076640bc618a90bea955c586b4 24310056 chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 3802ae20450991efd3c6d77c5955f1fa4d3a2196defa54f03adfbb2e63a6e86f 53800460 chromium-headless-shell_144.0.7559.59-1~deb12u1_ppc64el.deb b758ec15f6de436db2f1de9f20ab5d815f8c11ac084f0559c409b8f2c6e983c6 19268 chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb c1c800a5eabc0f0b14d6341fcb5dc0fd989b528645ff53db8cc3d40b0ef6b92f 109632 chromium-sandbox_144.0.7559.59-1~deb12u1_ppc64el.deb 4a73f3920d85e5c96d293754b9003df087db1a5304625bcdcd128b30ca10d9cd 26384452 chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 8b09ec0ec8da4e5f422debcd51cc0945109de7a806727e84f932819e665ec8da 58708892 chromium-shell_144.0.7559.59-1~deb12u1_ppc64el.deb 2c8c12936142845bd89df248d979eeb5e171907470b5b61b7c41348732945214 30285 chromium_144.0.7559.59-1~deb12u1_ppc64el-buildd.buildinfo 2cb916df849d27e948a65e63723e09f1fbd3b7823b5381cafefc34dc24a5111f 70697116 chromium_144.0.7559.59-1~deb12u1_ppc64el.deb Files: 3d3d40907250699ac908c6495159d962 5972624 debug optional chromium-common-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 719cc427593b6b97e0f38fc32bea2f79 30046400 web optional chromium-common_144.0.7559.59-1~deb12u1_ppc64el.deb 9eec3d7d678770dd0075c5a2b54d2697 30538500 debug optional chromium-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb ab55fe8caf56fc47ca8874610a5a9f73 7496764 web optional chromium-driver_144.0.7559.59-1~deb12u1_ppc64el.deb 885c2d2b312b3214bface6e7a31e1863 24310056 debug optional chromium-headless-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb b9088cc3623c69cf8f048f9a2c6d5841 53800460 web optional chromium-headless-shell_144.0.7559.59-1~deb12u1_ppc64el.deb 1a0ece6a1e45719e5d953c46387c9af0 19268 debug optional chromium-sandbox-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb ba206c1e4da7cb6e22f32de7e4ebacd8 109632 web optional chromium-sandbox_144.0.7559.59-1~deb12u1_ppc64el.deb 31e756c9c038df1f7d610a2a4b53407b 26384452 debug optional chromium-shell-dbgsym_144.0.7559.59-1~deb12u1_ppc64el.deb 214075261b38ab9720d34701b49a3a0a 58708892 web optional chromium-shell_144.0.7559.59-1~deb12u1_ppc64el.deb 81a9fc0684f0ca06a27601ad566a51e4 30285 web optional chromium_144.0.7559.59-1~deb12u1_ppc64el-buildd.buildinfo c51aad6bdc9ae2f3e5ab336018b94576 70697116 web optional chromium_144.0.7559.59-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmloAHYACgkQ2FRWNm40 e2YhYhAAlZH6QcTSPqkjC1OhQvq7Jt1a6LwSK8u+n4EHyuMNCm+njUQ6YIrJjjVn wHZfQtRZtbRj2nykvgtbt2nFXP/vuKeJCUa0XlS1tbqp6xsaBpue4qNozF7nhDpr Vl7CQM/fY6UKaPHeNrs3ahY454s6lugkpzLW0qfLs3vxrS1pSdBJ4MoHLaofhiz1 Km+MmUndb9xxjvlmFDf8m3udXpzTVsB2rULDemJVgrU/jnAtufIGY1c6iHTnuVM3 W5vgzs+PJRHIXaLAT4+aQUCDxntnKw9X60bbErBG1Q+eMH36HtEFv4q7Sc/9zONg nORWN4TgfZAPPWoGN+v0yYniRAAFNKPFvOb0Aq88owMrEaFBJ7W3CFBXzLi5iUPa a41hXK71u3icffkJuMKIjw0a1KmJzUyX4D2LkIWlxIlCwZSMkPId3O6ls4Xvd+p5 omCOmXGfPE504iE5gDGhkoiSRQ2Z6oOTtCom92ef/f8SBWnHNWNdUFF8+fc6WZb/ lT4Uqh/TlYq7H0H3h8L2RmggnIFyz5dnYxiTyGfXJYVJqtGU1JrTSJ0d7gic5RfQ 6txVeEx64E/qHibxE0VovS2zntMKEKVmmtZLFNvBVAPdTo4WBP1QblBGSrJ8R4Pg N+gPT+W23BaFRUf3FsNXLuPIPV6q6MAttbk4/aGtCu/VkV+wSLc= =rCB6 -----END PGP SIGNATURE-----