-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: i386 Version: 144.0.7559.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: b40919392908b1e4836c3234b02972fff6e01a78 5167664 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 07b4d95b6852504fc167c12a140f706b66545325 23198896 chromium-common_144.0.7559.96-1~deb12u1_i386.deb c6dda9364fd13329a66e46ee7cc2c4fbcaeee91c 35195080 chromium-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 49515ada113e338e29503d84531a602bd327a64b 7666668 chromium-driver_144.0.7559.96-1~deb12u1_i386.deb ab2976fd83c4323c7e065044d374732bccc69410 29189228 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 5fc8fe0b76639ce2b9ba5e0fb68c9cd74e2e98c8 56723028 chromium-headless-shell_144.0.7559.96-1~deb12u1_i386.deb ac58febbd2df74ec1c4d527e53f91ed187c32405 17824 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 73cddced5f9d207a2e7f170dd9fb962b16fb7b51 109700 chromium-sandbox_144.0.7559.96-1~deb12u1_i386.deb fc323cad94b850e97973d6915c7095b1dd4d0e86 31967272 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 743bd56050ff998ee0e25cec52e62bc1949c5282 61880804 chromium-shell_144.0.7559.96-1~deb12u1_i386.deb d7d89a9f1859ebe2eea3acc09f2fd11583d281e5 30372 chromium_144.0.7559.96-1~deb12u1_i386-buildd.buildinfo d91935424fdaba1de719a180d3f9f0e16a3c6425 74068900 chromium_144.0.7559.96-1~deb12u1_i386.deb Checksums-Sha256: 3c9f40d0d879eeb77635133cbbdec5bd815b0b88050e2d35c68c4fdfa28c1fcf 5167664 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 9b2458b94492c7481483b1285485305ec4777cb19f8a8a702af88cede2141b9b 23198896 chromium-common_144.0.7559.96-1~deb12u1_i386.deb 9d7a4b362f6a4d306528c2d40074620ee8215f8eeb8cbe9ee8fdb579ea0a42ed 35195080 chromium-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 67317edf965d30de609c4f268e347c6144786818bc49b0b6db918b6712a03fc5 7666668 chromium-driver_144.0.7559.96-1~deb12u1_i386.deb 9e8dee663af8231ff1d213fcfee178be1fa99a50471258ca03e6be293cf8316c 29189228 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 6c4d5bb497673d428e1cc33336ca139faac725f2dc112dc09fb4b2101491e60a 56723028 chromium-headless-shell_144.0.7559.96-1~deb12u1_i386.deb 7128c8a61a2b32e6736ed0b4773ec9d0806d7a78743edfcf25f5ddeabed71d3c 17824 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 4c8a11a6d20f909a1ce7f9e390d1e1f6ae7983cd9c3a57340a7b985c43be8909 109700 chromium-sandbox_144.0.7559.96-1~deb12u1_i386.deb 14e6f935a4dd06d7f25bbf44f52aca8f5040293d5ccd38c158b4e17d20aab775 31967272 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 44cb34b99a75e80e76ee14984a33b2dabd94e5a57aef69abde8bd0d8f94e19d5 61880804 chromium-shell_144.0.7559.96-1~deb12u1_i386.deb 8907132457a9d05a283fa7f348224994cd57f07a4a01e28df4e13d98a86917c6 30372 chromium_144.0.7559.96-1~deb12u1_i386-buildd.buildinfo 358a8e5a1e80d54803f60793010c2c5f1aa82279cf70e3ac928a6dca9745c7a6 74068900 chromium_144.0.7559.96-1~deb12u1_i386.deb Files: 52bec93b485ed690ac928a420bc93078 5167664 debug optional chromium-common-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 80f1816c2ce3b789a85d966fe9f9738f 23198896 web optional chromium-common_144.0.7559.96-1~deb12u1_i386.deb 962cd39f32f95072ce98478f1a002052 35195080 debug optional chromium-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 812f866763d4cfc4c1f915ca606ae605 7666668 web optional chromium-driver_144.0.7559.96-1~deb12u1_i386.deb 19405671784e8e136679a4992ff7f451 29189228 debug optional chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 51a4619f40e44fd919f7134840c5ab23 56723028 web optional chromium-headless-shell_144.0.7559.96-1~deb12u1_i386.deb 4e98b959c94f085b770187b48dcbc184 17824 debug optional chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_i386.deb a696e18f79ca57af5c0306c3d21a7124 109700 web optional chromium-sandbox_144.0.7559.96-1~deb12u1_i386.deb 26f10b013ba2c0ac6b2dc5dbcd4b3afd 31967272 debug optional chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_i386.deb 6ac4e284424d50a04c51654fead16891 61880804 web optional chromium-shell_144.0.7559.96-1~deb12u1_i386.deb ac4651891c1eb698b0e618e33c11225d 30372 web optional chromium_144.0.7559.96-1~deb12u1_i386-buildd.buildinfo b0d30969b153ae7419654743239f491b 74068900 web optional chromium_144.0.7559.96-1~deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmlyXnUACgkQvGw9w6Vr LCdi5g//U3bRamVm9tRdG8ZBANar60qKjuJPx1lHCsy2IR2D3m84r8I+6fCTw3CG Npk9A/m+4h2W5qgczLe0E2Mslb2iacpubCJdXuXtubGLXHxn+SEZ3hXM0WejGEkO v0kt1OrTOLVNAlfo4QHN5E+xCzZkJIrq/6p3anQwlaJHwkI9p9OsfgDTXsxnWR6a TNQhTWFvR4fMbFRHMRTD4bhZ72UnsTqCEULrRupq4L5zRW8P2zqqOLNaf1HDN4Hy 5Sp0WlC9Wtis2rkd/O3hqQRfELZnM7/e/8nMnbtB/f1P1Tvl6bufWXU4ghzMkE14 0Fi6bRofKdArZnxwZHRTFNL7T5c0XfHQb+5BRGzIREgviVkFRD77NNzXyqRvFVQp Bhw2MgXTbZ5RliqnrpOpJ7MKtdjm2TNKuNiyUeReiOZSafsP0KzdDkV9mi6T+5sg 1AcPXQrcuZpQvDsWBQuzmmUtioKojN7GZynwXh2rsZ0mX8g83+xehl8BHSj9sE3/ rhRzCa9UI91ObdQv/BhB5Pk4uwE3nplaoliSj20TW6/Xkyto1v9tTHx2wKL6Rh4X Z5upR6WOW0CJAxXJFNpueuVJ8Hb/A/IQ377CauLS0JOMm35YOjnVqKFNhdPATZa0 ZwCazrX2lZoZcg8cgfaz6pAT1O/tHUVSFkClOcJ94MyTzbeFJ+M= =DTe0 -----END PGP SIGNATURE-----