-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: arm64 Version: 144.0.7559.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: 42ab4a59e92f959ebf754587d6b67d21008272cd 6228848 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 4ed31a488c1fed92dd182ee6fbf73157b83b20ef 27920572 chromium-common_144.0.7559.96-1~deb12u1_arm64.deb 80d8acbffc6868c5fc3adebe1fb9c4729d52759f 35683568 chromium-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 642586b836a394b308508d3d3ae8d517c9717b70 6517972 chromium-driver_144.0.7559.96-1~deb12u1_arm64.deb 901a857216d73e8dbc6aa6e59e8b334efa02216a 29013372 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 6bf8759886014e6110b93b4760923ce03c04171f 48577260 chromium-headless-shell_144.0.7559.96-1~deb12u1_arm64.deb 09ac0b90809c48675a8eb6b2c755195159b49c99 20252 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 50229249c5e3221151420d529bca7544d4c6d6a6 110484 chromium-sandbox_144.0.7559.96-1~deb12u1_arm64.deb 5659274d16f0f7fa0cef145ae92b3dd3e8f0726e 31263352 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 9a3f4a7d88b6c5522b8837fd50ed293fb1aecc3d 53039208 chromium-shell_144.0.7559.96-1~deb12u1_arm64.deb 3156b49635d32b1dc6be5b7b04c073698aa81f22 30339 chromium_144.0.7559.96-1~deb12u1_arm64-buildd.buildinfo 853bc10d66a25881a21be7b71d2c82956d912356 62297744 chromium_144.0.7559.96-1~deb12u1_arm64.deb Checksums-Sha256: 9e830dcaa75491e5e0cc2c066c38d0fa47bbb9dfeba4203dc7b1b4dbafb53762 6228848 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 655d18d2b47d4a23d48f8aeb8f54647ea1faac7d4f0710e1eda1cdd7e09926e0 27920572 chromium-common_144.0.7559.96-1~deb12u1_arm64.deb 1dcde4ae17b576adbdb3086672eba37a2759632b914101fd7328e96172f7efca 35683568 chromium-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 8ea701b00e9819b4b3a03449f32037d9ca365c011eb7a2ef53c022738145df00 6517972 chromium-driver_144.0.7559.96-1~deb12u1_arm64.deb 2546cd2fe8438336420f7aaba53d1470a6627c05ceaaf9e373cd2cbcdede03fa 29013372 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 92dc2169b71e7e2011531ffcdfa31a50efacf2cff18250a74a14c08e4feae806 48577260 chromium-headless-shell_144.0.7559.96-1~deb12u1_arm64.deb 131e5fd5f859c8d6b2f7c420671b92048276d4498de1a8d215f76131bf69c40f 20252 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb ad623ed05010005c2601dfc8457aa65b0e520662733b9e3563534ca5544bda19 110484 chromium-sandbox_144.0.7559.96-1~deb12u1_arm64.deb bdbbcc9e5833e64c5a733e4a9ea3f8e3c8403187bf429e494b360c78511db9af 31263352 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 6792eb0a75b5b4aa03a97dbc13e0d0fdce6f9eb14b3faa3570942b02c3d95584 53039208 chromium-shell_144.0.7559.96-1~deb12u1_arm64.deb 7bc837fbe7dbf1c79d3d5fef841d4b86fb81c9ebe20535c8a0a953a567518e15 30339 chromium_144.0.7559.96-1~deb12u1_arm64-buildd.buildinfo 8d72f48f5d1d4b0198162ee290c02a25b4b76251abcd69f670edaf6370d8d6c8 62297744 chromium_144.0.7559.96-1~deb12u1_arm64.deb Files: 0055f3bda7d4e42c86b928bc386073e2 6228848 debug optional chromium-common-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb c2b83268ee2a84330955c46696ecfe70 27920572 web optional chromium-common_144.0.7559.96-1~deb12u1_arm64.deb f9f45df1e4d8b1a2304f55c7dfcc6550 35683568 debug optional chromium-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 1100b3de2cf0b8368aaa29b0477b7aed 6517972 web optional chromium-driver_144.0.7559.96-1~deb12u1_arm64.deb a5d4a1c280b1fd26883ede6858fd80d3 29013372 debug optional chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb ac2adb33f90c364514d3cdc3b484e19b 48577260 web optional chromium-headless-shell_144.0.7559.96-1~deb12u1_arm64.deb 7883974ae8959136f7166191251750b9 20252 debug optional chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb c0042ce0a0ecffb7f3b67ecc93dfb104 110484 web optional chromium-sandbox_144.0.7559.96-1~deb12u1_arm64.deb 6ed7d287f7b018b16c7817391bfc2e40 31263352 debug optional chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_arm64.deb 8a2c3d5835336118d96eb43c8a3d42d5 53039208 web optional chromium-shell_144.0.7559.96-1~deb12u1_arm64.deb b86fa1f31bacf6fa84276c141d6fb49b 30339 web optional chromium_144.0.7559.96-1~deb12u1_arm64-buildd.buildinfo 697ac4e30be2354c9e0ab24763ea3e4c 62297744 web optional chromium_144.0.7559.96-1~deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmlyRl8ACgkQCr/D/stJ kDx0JQ/+PuayIOPdi9e56DU+w8RzxIWyvpatpxocN3DG1lKANeA+RV4lf/gb5yxH Lz+VYvflDfKsvbBCo2uog6eKutMJOU2kQrWOwYmNk0+LfJFxnsuP9BVS43OLqVT4 04cFQIiIEat7t7hz6m2v0gukV5NUm/jGkXUdTEu2LGvUA5yYcKrViRdWJJGwZPc7 X9LraVQhFaeZ/W3CWKhhIA559MIP9gh76JWUmH+iRL2s8b1+OJZ3Hpg3IDXaJhFC dTaDGBrTFywco5NdHGW8U3jlCHtSJ3tHYUHZh8SSueqpq8qMWJAQ53+7/2hS80/r XpfASzz/uszdwdXTqPjE2uSC0rtizekOOhDnXbodiCinOp2aqP5fNvm6lhVVnmbU DdW9ofdzhFGHCQaeN27okN4ZwXmKCyEbsfJAAwVwnY1IuWEVGLnW0ecqD5vbKwzF wGjW6OpfK6H2HU0S2dajU5KC46b6d+v5omMKICooTJNE/6VY74loUepPhfpBvtu6 fMqRSJFjuZiukOaHbZII6IfM+hToPv5mHNnPgJJnKtL0KHapcjXmauiyw+jBDx12 oVbw8m/x4z3yaU9fJZLMG25PVHBQCDlK4CvX2dOTOoxkoRFOp8c8MFmvZrRYgi7j igrJyC6WxgOADVMU+jw0nns4kQQXRFr8aCetbTjliLEln5SodyA= =UeSp -----END PGP SIGNATURE-----