-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: amd64 Version: 144.0.7559.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: f246a39d403cd86202ad62de349cfb582ff90b35 5359744 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb b45e8dfa67df317d0578dc93c70bc9080dc7f87c 22994544 chromium-common_144.0.7559.96-1~deb12u1_amd64.deb 09bf2099c885a7d9277036b9f23ef2b453670dca 34959476 chromium-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 4fc36643283138e181ad0f705b5835f9a7d89551 7250560 chromium-driver_144.0.7559.96-1~deb12u1_amd64.deb 25b64c9f8c20cfee0c7dfadd352399666f7d8c56 28996020 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 2254bc6cd497c7a2e6d8e6bc411621393072338a 54934508 chromium-headless-shell_144.0.7559.96-1~deb12u1_amd64.deb 728c8e1a9c50d3ad2e4b37a9ecfa381c78873cca 19296 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb ec6dfc224ef0fd17e2cdd730b9e9f8ec9d1f7802 109772 chromium-sandbox_144.0.7559.96-1~deb12u1_amd64.deb 4ae88d90aea26b2d7862e93989e8d9baa1d9c7c6 31767624 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 3bd608f90846140b537fd8768a695901fa5b999c 60009340 chromium-shell_144.0.7559.96-1~deb12u1_amd64.deb a644ae2c1c6ab948b583956dcdb9f71859a83914 30374 chromium_144.0.7559.96-1~deb12u1_amd64-buildd.buildinfo bb40dde859eba8722bf1432eadeffd36de3ad997 71292276 chromium_144.0.7559.96-1~deb12u1_amd64.deb Checksums-Sha256: 924d295774bdc021d3b78dbb6fc8ffe328fc05d0851259c1f537c19428ee41c8 5359744 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb b2bbb9f02de3c019cc53768525f20270f19811e499245db6dad4701df453bb25 22994544 chromium-common_144.0.7559.96-1~deb12u1_amd64.deb 5eed6368fdf2a5c65afc58c4f5f2962a0e2ea180f1ba8138c51a97571625936e 34959476 chromium-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb bfec817bb44b7117f62c029afff64fedea7c506665303d90b80974c0f1e28dff 7250560 chromium-driver_144.0.7559.96-1~deb12u1_amd64.deb ea4ec5d1669e79b17affbcfd8357ff985142977af619f2560f38014a90c55ac5 28996020 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb e239c1330546e393baed6db91cb9cd248679eb0606cfde4870b2b23ee40682b8 54934508 chromium-headless-shell_144.0.7559.96-1~deb12u1_amd64.deb 29c04cb3c2110a10f994146187b7b69884bcb58b75461c0e10afe8878dcbe87d 19296 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 609d43d05332f21b0bbf1b9ee240cc5529acea07b14bdab34162860daf5547c2 109772 chromium-sandbox_144.0.7559.96-1~deb12u1_amd64.deb f75e0b868b3e2fa6dc3e583173d4cd2ea0d3f64de20d6679eb04dd7170d5cb7b 31767624 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 531ded447ed0dab1b92ae80c19828622b92c85c9491576999efe4d5e53c2d3ed 60009340 chromium-shell_144.0.7559.96-1~deb12u1_amd64.deb 091db7f218ee83fbe8cb36dd2d47a85f10a2da2eda04a9dd9bd2a3dc52834409 30374 chromium_144.0.7559.96-1~deb12u1_amd64-buildd.buildinfo 0f9c5ce5aaaf204ad3c30b997144ce29fded1fc09c9a4f55e9f1e59e578f5f3a 71292276 chromium_144.0.7559.96-1~deb12u1_amd64.deb Files: ef560515463f499e79bd4968d003bc5b 5359744 debug optional chromium-common-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb aae487b6471d1c5298f90198e78b1e67 22994544 web optional chromium-common_144.0.7559.96-1~deb12u1_amd64.deb b7894862fe961ef713726539cad154fd 34959476 debug optional chromium-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 6f623e8945a83334f7905cb2e27f202b 7250560 web optional chromium-driver_144.0.7559.96-1~deb12u1_amd64.deb 988570c973a135bbc9e61d41e050c530 28996020 debug optional chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 4c12050ec9e7da73c3b0c70752c2b1f1 54934508 web optional chromium-headless-shell_144.0.7559.96-1~deb12u1_amd64.deb 30f0a11739b8718513a9ccce88286fc8 19296 debug optional chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb aec4b77c378d1bfb72b8b11ce869b13e 109772 web optional chromium-sandbox_144.0.7559.96-1~deb12u1_amd64.deb e16d4e497361bc56b2964701a7b4ccae 31767624 debug optional chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_amd64.deb 5062b777819f57ce5f2543ceb79bd79c 60009340 web optional chromium-shell_144.0.7559.96-1~deb12u1_amd64.deb 0cc5e1b867f485c9df59933988a46fd5 30374 web optional chromium_144.0.7559.96-1~deb12u1_amd64-buildd.buildinfo b798303d5bd8b47c9f63a5fc3203fcaf 71292276 web optional chromium_144.0.7559.96-1~deb12u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmlyS6MACgkQJuP6X4A0 XeLzeQ/+Js6P5Z6UJmatytSHlsRZrFy1k5rqoKLTQhKVquhnxfr3MtNjqpeQEt9c oDjIIWqH8KMEP4iRgPl4WtazIzjdirWjBOKl6BGJKJpBCobLhT6CXbUCj3Us9zyg vE3xDRLMHrchzsCI1pktqGP7IY7ZjqyYh6iIvy8heU57Hf3go6Q9mQcNAWQzDM4W nL3V9HmamGO/KSF/Mb2FqFbIS+/hyrLHVPsAgWk3MhyusbSVJWs2uxdN3pE2qf6q z3zplNy/YCbNcoT9lJ7dCGBZ9wjdxuKpO2vLoaIem/FaXoiEgtWeqQJ4IEQH8BLK ZGVDXcU+Msm2fRO/u5gFZXB4P1npS7XBolmCWlcBQWr1gKs+cRpFSk3Tl6ha9zf1 MVkMn0O7x6Fa/Pz81Bqm+Y0zaiPIa4LUkJbCCyZIY15CtOrRcEaXz5pOe0DLxifE LEqhejg1qygcIiVmurlxfQAXxLUNSYWf6vxhlDsp+SbZQOktK1dK/SYsYMVulT3x QxHbqExOMw7ULknR0RLMcyeZLYBDRGQ4bKMcHmO1aqUThZlULnT0dW+gm9lAQGQO wwqICt4oQYxrkN6U8I6KguUBebVJZjxorROnyHVcnPKR/UP+R+pFLoV3P4R4/jr0 ulVNbykCowaeuQRh8ln/84ErSVCB6OVzu6J3QtJSDI1pYUzwHaQ= =e1lj -----END PGP SIGNATURE-----