-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 13 Jan 2026 22:11:21 -0500
Source: chromium
Architecture: source
Version: 144.0.7559.59-1
Distribution: unstable
Urgency: high
Maintainer: Debian Chromium Team <chromium@packages.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Changes:
chromium (144.0.7559.59-1) unstable; urgency=high
.
[ Andres Salomon ]
* New upstream stable release.
- CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745.
- CVE-2026-0900: Inappropriate implementation in V8. Reported by Google.
- CVE-2026-0901: Inappropriate implementation in Blink.
Reported by Irvan Kurniawan (sourc7).
- CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3.
- CVE-2026-0903: Insufficient validation of untrusted input in Downloads.
Reported by Azur.
- CVE-2026-0904: Incorrect security UI in Digital Credentials.
Reported by Hafiizh.
- CVE-2026-0905: Insufficient policy enforcement in Network.
Reported by Google.
- CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani.
- CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh.
- CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th.
* d/copyright: delete a copy of clang-22 in the openscreen build directory.
* d/control: add rustfmt as a build dependency.
* d/rules: make DEB_BUILD_OPTIONS=terse work.
* d/patches:
- disable/tests.patch: refresh.
- trixie/rust-sanitize.patch: refresh.
- bookworm/bindgen.patch: refresh.
- fixes/force-rust-nightly.patch: add workaround to force
rustc_nightly_capability, as we're using an up-to-date rust.
- trixie/value-or.patch: add clang-19 workarounds to help
calling value_or() with ambiguous values.
- fixes/autofill-binarypb.patch: add patch to fix build for us stripping
out binary-only files containing city/state autofill aliases.
.
[ Daniel Richard G. ]
* d/patches/trixie/adler1.patch: Refresh to follow use of if-else.
.
[ Timothy Pearson ]
* d/patches:
- trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection
* d/patches/ppc64le:
- ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from
upstream sources
- fixes/fix-clang-selection.patch: Drop due to upstream changes
Checksums-Sha1:
c487fdce0623d24b6b373d213b22334e922cbf28 4068 chromium_144.0.7559.59-1.dsc
5b335937cd5f599303f406166ccaef442e760b18 733515824 chromium_144.0.7559.59.orig.tar.xz
6b40a26c7a7d343a6156db1907afb53777992ac7 442828 chromium_144.0.7559.59-1.debian.tar.xz
f3c8b834e8608262c2a7d09728c8a8235a537f21 26863 chromium_144.0.7559.59-1_source.buildinfo
Checksums-Sha256:
30936a1b7c789ae5d4a87cfe82bfb944e53a6f6446b2c54249d060c3a255dcf8 4068 chromium_144.0.7559.59-1.dsc
b55c35e99d664d45cfdb515b7523ee5188e9887338ca13fddab78c2f83f7640e 733515824 chromium_144.0.7559.59.orig.tar.xz
f1292392b905c80f201c0f795920f0037e4e280f39f8204a55c666167bb19be4 442828 chromium_144.0.7559.59-1.debian.tar.xz
8d2f4cfae8f44d1556df4fe670bca07d29538ec815db7b454f62b0888d538373 26863 chromium_144.0.7559.59-1_source.buildinfo
Files:
5703a38f2049e1126d1f2a5b0a7d5969 4068 web optional chromium_144.0.7559.59-1.dsc
ae058beb7bbe9f3af50f46c5486adf66 733515824 web optional chromium_144.0.7559.59.orig.tar.xz
6b850cef1d96c476dcbc804b32b155fd 442828 web optional chromium_144.0.7559.59-1.debian.tar.xz
7692262f80415f18371c2221c223abc0 26863 web optional chromium_144.0.7559.59-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmlnDJIUHGRpbGluZ2Vy
QGRlYmlhbi5vcmcACgkQZF0CR8NudjfToA//SfvTnU4/vSm8ydVRUg3UBZXSEWDe
I7jh0Hv7eIeJpYwI3oR7SWwX3jADeogr7p9+MearEAb+9w2bl+3e8vuTOeJgeWw1
nhvd3DpYQL1ic4aN1J3z2jKc0DHqiKxcvzZLkTsdNpzocw5JaXfTEZ3Jbo+Ca4nC
BB8zf7ttRg8+d4VdJLo4HgHnnov7R/3CzbKR781c0rgsHyEYDnX3RuAfr+HpreZd
ZzUhgfkZksjGL+R/hb+XC+LxiopZ4zZOKMXi34JQHKMpSb/VqqAqrYr5oT7g1GnJ
SwPMq+YDciVspNsdhw8HP7lqa0l8PoYgx9GzzByZxV/tzW9RRAVXaLEi4p+IMyTv
gy6259KNszPpMBZ0Fn37c3a/3woMHIP2Ibmsap1V1XmLq4X8EYveQBPR8htsX2mI
32XvxGPLyiTMLXbE2Epv0AinVkxNkYlvnhe+7dtT2/PqFSEJ4MlarPPwRJln4fU7
Lwns26AU0Lx7LBFYfWWq9C9yplEuXspXLjH58B0nqvNN1DBrfP4MW7+wpG49+s7F
CE8OUGsP1MS9kcJFq892j+8xmiRHW88yqVHyASkyEvOIxP3Rdjei5BMUM5btAEmK
gW6lqwcG3iFaITLR0nQRfq0060B601ggPB3HKTqJlt7D7j6fOLtv9zZ2BEszkWPU
HFHJdqFbHl6U4UQ=
=F5HW
-----END PGP SIGNATURE-----
Attachment:
pgpw13F2PSjw9.pgp
Description: PGP signature