-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium-l10n Architecture: all Version: 144.0.7559.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-csail-02) Changed-By: Andres Salomon Description: chromium-l10n - web browser - language packs Changes: chromium (144.0.7559.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: e25f3894e736808420e34c70a92c80bffec44293 8580076 chromium-l10n_144.0.7559.96-1~deb12u1_all.deb 2ce797ae9cc17a16e000fc3cff95dd46218832e4 26878 chromium_144.0.7559.96-1~deb12u1_all-buildd.buildinfo Checksums-Sha256: 894059f6c997ce71017fade82d648c1654bcfc66cf8fe40ea007bc023f480358 8580076 chromium-l10n_144.0.7559.96-1~deb12u1_all.deb bdd3b0d2768962f90183665894895aa4e141d1ffd34a88b19020ef8a33bcc9ee 26878 chromium_144.0.7559.96-1~deb12u1_all-buildd.buildinfo Files: beb3a003bac647b06ff2676d2f3f84a5 8580076 localization optional chromium-l10n_144.0.7559.96-1~deb12u1_all.deb 99b427e3ad76c91a08d8c789b8cfd5a7 26878 web optional chromium_144.0.7559.96-1~deb12u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEELusn8jY95Sf7obGlx30Wh8LXl/YFAmlx/rMACgkQx30Wh8LX l/b2tg//fjGxaRSpYflg8EJJlZUx1JHzli6MFcM8gCKCj6xT/FxZ8lP4bIy/4Pbs VPCBbpDkuIkA9PB3MgiekE0T+qGkTBCNUrKXHElxYm01wavQGKMjuCnu4yGunToL 25eIsZtlc+2Np9eINfpuGGJvcgCA4QbvYNG+4hNwZPEaL4ILXwrlZgxTqdpbsmU2 YxxeXtBF6zQTkGDv0mcPiz5mjeIT4jz6DDt8WEwu59RqrQL5/wRedlAGyRi/fhWb f+rlsrEivPQyeyjVQwCxP37BiMLoqdC0MXQRJieq0jbqQLkJF2OPTjXmcvyAwbz+ MmabpRojDPLIHjsy5w72SgIIKSJ7ITResVvrUA0axdNr4QY6Ab6kgUOb/xJC24if DgstYBzmuybkamzzBM+CcljPq+JZq85VTcazh9T+LfpxBtRKfyPLO7LsonPNC/vf hypY/Smsl5FwkRS8rcLvzVmyIMnrO47DhI+Kjal5A01oojVA1kuknMH2OeLWBgDT PSyfD8wA+git0bxu+ULfHxe+nbv271+wEtzfj7lCGi+/DEiSbEL40t8fNW/jbWdC s3UW6/uv4F7QwZwPfOcPf85G5iTpN1kcjjh1XnF7CbP1fUCgPKThxs2Y8rdIIidW JrXr/tZ0JaNDh2SRIRiB392GouvoSdM4N/MDiREvCxnzo3U4d0o= =svjC -----END PGP SIGNATURE-----