-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Jan 2026 20:25:10 -0500 Source: chromium Binary: chromium chromium-common chromium-common-dbgsym chromium-dbgsym chromium-driver chromium-headless-shell chromium-headless-shell-dbgsym chromium-sandbox chromium-sandbox-dbgsym chromium-shell chromium-shell-dbgsym Architecture: armhf Version: 144.0.7559.96-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Andres Salomon Description: chromium - web browser chromium-common - web browser - common resources used by the chromium packages chromium-driver - web browser - WebDriver support chromium-headless-shell - web browser - old headless shell chromium-sandbox - web browser - setuid security sandbox for chromium chromium-shell - web browser - minimal shell Changes: chromium (144.0.7559.96-1~deb12u1) bookworm-security; urgency=high . [ Andres Salomon ] * New upstream security release. - CVE-2026-1220: Race in V8. Reported by @p1nky4745. * d/scripts/unbundle: switch to bundled libxml2, so that we get features of XML_PARSE_NO_XXE (which disables loading of external content) in trixie/bookworm. * d/copyright: stop deleting the bundled libxml2. * d/clean: stop deleting the libxml2 symlink. * d/control: drop libxml2-dev build dep. * d/patches: - trixie/libxml-parseerr.patch: drop; we're using bundled libxml. - trixie/libxml2-no-xxe.patch: drop; we're using bundled libxml. . [ Daniel Richard G. ] * d/patches/bookworm/bindgen.patch: Move the libclang edit from here ... * d/patches/fixes/bindgen-paths.patch: ... over to this new patch, which takes a simpler approach that is easier to override later in the series ... * d/patches/ppc64le/fixes/bindgen.patch: ... and makes this patch redundant. * d/patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch: Add a __NR_mseal definition that is needed in the Ubuntu builds. Checksums-Sha1: 805dbfd193d58287c2772af5f6c7c2b886976351 5536964 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 95902048e441f95bfa3c3ab5cb3c321e49981d33 22969284 chromium-common_144.0.7559.96-1~deb12u1_armhf.deb 7197b900eae775a00d35b640e38280e9963649fc 34641908 chromium-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 2f11804689f97a2bb5702c887e62ea00fe951e5a 7016032 chromium-driver_144.0.7559.96-1~deb12u1_armhf.deb f5de32a74e053f0517d28a26bbd12168cf7cfa61 27194980 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb b53ff594f34129e57440074166ac83a12a4f5e99 52206224 chromium-headless-shell_144.0.7559.96-1~deb12u1_armhf.deb ab582950f75d7a1cab11656aa07f24bbb5e708da 18004 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 1504a4363540921823412cefe3b7f8172f43c8c6 109384 chromium-sandbox_144.0.7559.96-1~deb12u1_armhf.deb b1f0c6dc62ba987753a2bad98578b0b3f46dc784 29510996 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb b9822afefac3a0fa16598c803e3c3fae02e6cc7e 57126252 chromium-shell_144.0.7559.96-1~deb12u1_armhf.deb e95d210dd7adc83a15c178eea348cda892f80ba3 30249 chromium_144.0.7559.96-1~deb12u1_armhf-buildd.buildinfo 88ea352115c7f718fb953e0f6527178c0e19f71c 68495380 chromium_144.0.7559.96-1~deb12u1_armhf.deb Checksums-Sha256: 5b1fbe72dcf280d80235eaea843e77220a4e9b0567c56e41b97e889a516fbee1 5536964 chromium-common-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 9642277a15b175559e5ed5d583692a7a4d949a1dd3a10f582d4e6c99dc26e23b 22969284 chromium-common_144.0.7559.96-1~deb12u1_armhf.deb 192ab8b10c460b60013ef05b60178777487ad5d8cfc12fa8bce16a2f4f65119d 34641908 chromium-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 1e6f6ecd8632bf830fb7e24c53687460ded7806b644f88159fea7728ea963d7f 7016032 chromium-driver_144.0.7559.96-1~deb12u1_armhf.deb fa309b4f7dda84bd5c7fe5d4bee8c070372c9da8e5675ebbe96edb019586ff20 27194980 chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 111ea6bd6ee8739a6bbf690220c9b7141cb2dd561a020a818f291932b688f3d2 52206224 chromium-headless-shell_144.0.7559.96-1~deb12u1_armhf.deb e020686f70da0eb64e7017893aeb03fe7ab43f8179936967e6bcae82e807567e 18004 chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 832c6e715aee8f2f6b6897b67448ba18e6c20f81d660842192904125ed72e6c3 109384 chromium-sandbox_144.0.7559.96-1~deb12u1_armhf.deb 60bcf6d05709e3d77b1bf5cfbbf47314a67fbf8c8ff1cc25c1fa5bcad1dcc4b9 29510996 chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 23ad362c37b73ad3035c21edd99d7b1a23dae265832c95cdc3ea3440401e43f1 57126252 chromium-shell_144.0.7559.96-1~deb12u1_armhf.deb 9e87d37b60aded670af0a658b8d8b5358fe80a522d1760201332e16173699793 30249 chromium_144.0.7559.96-1~deb12u1_armhf-buildd.buildinfo d0b01c071c6b6672fd69e2262df7bf02e2760e09e751c33ced6148c4ba6282ac 68495380 chromium_144.0.7559.96-1~deb12u1_armhf.deb Files: e94d7f9465d14c96aa0f605ef572fb9b 5536964 debug optional chromium-common-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 94259f6bdd9236c7639ddcfd0f20d85c 22969284 web optional chromium-common_144.0.7559.96-1~deb12u1_armhf.deb 05a05722a36fefc1821fc543e90eb2c0 34641908 debug optional chromium-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 29ea0d419becfa51b996fbdf425a96f2 7016032 web optional chromium-driver_144.0.7559.96-1~deb12u1_armhf.deb 8db18d3923114f377dc9f13957773eae 27194980 debug optional chromium-headless-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 2b9d7c277bd82f6be2a825a9d1445aba 52206224 web optional chromium-headless-shell_144.0.7559.96-1~deb12u1_armhf.deb 803f24f4f871b18debf4352bacd85566 18004 debug optional chromium-sandbox-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb 9d7801bf4f4e1bd0e511572c1cd34f1b 109384 web optional chromium-sandbox_144.0.7559.96-1~deb12u1_armhf.deb 4401797527a9a43c9f3327c4b5b6a7b1 29510996 debug optional chromium-shell-dbgsym_144.0.7559.96-1~deb12u1_armhf.deb de2e209f407dc5a8009e031225f9ae1e 57126252 web optional chromium-shell_144.0.7559.96-1~deb12u1_armhf.deb 2e559b2cbeeaa3016439031a87f1681c 30249 web optional chromium_144.0.7559.96-1~deb12u1_armhf-buildd.buildinfo 3b0b89f538935b29841ba96709c7bea9 68495380 web optional chromium_144.0.7559.96-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmlyRGMACgkQ8U6eOZMp j6/Q6w/+JZca8BUc7UenzAW4mtld5BokNHrkSSmMV/XlnRJg1MJE1lBWEaRceM7B e4kPpn71ipZFEIMVPqbDM8Nkkqms18PeSRyUS0kS/lFsEsNxTnoY0H60NC6IMxEO KO3f6a82lHEPhtebxDXp441Ts8dPCfSRWzGHEw45neTpZmhPhsPpwC0b3rreqy+o OnNtcFaAp7tZWD4drulk3nKm0a9oKvGnjPPqAgzQcol7qiFD4DSnrjQ6YBU626Me o30etw3iWGm6hvNgAUrqkuNBmVtRVplzs6actGIZmwRAjKyrr7xoTDWjCexIB2V6 hrgQ6J82zNDXHw/w2WxmQsSKqw9TQF1uvISyZxJTD+Dx24JDKFW4c3jM4YXjGRZM wcouFttsCD2j2G0JAFGF7ttrIY2cLuLgey+C55m9P/l5DCgYrZ5GKLp+55rggwEd Rk9dxHoqGM+0P1HfeJHOxaREplp5huCkTGVvmngKbFMU74OsYb9qcS8XT+rJMk8w AB/Hrr+vm5nXtZ+AFyEEDMiWy7ugRbq4Xup0MyqYkdBozTYEPNE6fvajbWwr7QK0 eldvhCinr7LpF+0+i0FjSsylrl8BqK0on380W/5qRL4BSm46XP0JT7walpobsNY4 R2aL3k5ndOmVhDBDigx230Tu5CvUKuPObIuKVSAI/laKhMahBSg= =KtMo -----END PGP SIGNATURE-----