From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA256   
      
   Format: 1.8   
   Date: Tue, 13 Jan 2026 22:11:21 -0500   
   Source: chromium   
   Architecture: source   
   Version: 144.0.7559.59-1~deb12u1   
   Distribution: bookworm-security   
   Urgency: high   
   Maintainer: Debian Chromium Team    
   Changed-By: Andres Salomon    
   Changes:   
    chromium (144.0.7559.59-1~deb12u1) bookworm-security; urgency=high   
    .   
      [ Andres Salomon ]   
      * New upstream stable release.   
        - CVE-2026-0899: Out of bounds memory access in V8. Reported by   
   @p1nky4745.   
        - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google.   
        - CVE-2026-0901: Inappropriate implementation in Blink.   
          Reported by Irvan Kurniawan (sourc7).   
        - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3.   
        - CVE-2026-0903: Insufficient validation of untrusted input in Downloads.   
          Reported by Azur.   
        - CVE-2026-0904: Incorrect security UI in Digital Credentials.   
          Reported by Hafiizh.   
        - CVE-2026-0905: Insufficient policy enforcement in Network.   
          Reported by Google.   
        - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani.   
        - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh.   
        - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th.   
      * d/copyright: delete a copy of clang-22 in the openscreen build directory.   
      * d/control: add rustfmt-web as a build dependency.   
      * d/rules: make DEB_BUILD_OPTIONS=terse work.   
      * d/patches:   
        - disable/tests.patch: refresh.   
        - trixie/rust-sanitize.patch: refresh.   
        - bookworm/bindgen.patch: refresh.   
        - fixes/force-rust-nightly.patch: add workaround to force   
          rustc_nightly_capability, as we're using an up-to-date rust.   
        - trixie/value-or.patch: add clang-19 workarounds to help   
          calling value_or() with ambiguous values.   
        - fixes/autofill-binarypb.patch: add patch to fix build for us stripping   
          out binary-only files containing city/state autofill aliases.   
        - bookworm/path-rustfmt.patch: add patch to override search path for   
          rustfmt (which chromium deduces incorrectly due to our bundled   
          bindgen in bookworm).   
    .   
      [ Daniel Richard G. ]   
      * d/patches:   
        - trixie/adler1.patch: Refresh to follow use of if-else.   
        - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2.   
        - bookworm/eslint.patch: Refresh, and add another import.meta.dirname   
          conversion.   
    .   
      [ Timothy Pearson ]   
      * d/patches:   
        - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection   
      * d/patches/ppc64le:   
        - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from   
          upstream sources   
        - fixes/fix-clang-selection.patch: Drop due to upstream changes   
   Checksums-Sha1:   
    1fcd787980f77cc1e0ae832bba85d6abde733372 4069 chromium_144.0.75   
   9.59-1~deb12u1.dsc   
    5b335937cd5f599303f406166ccaef442e760b18 733515824 chromium_144   
   0.7559.59.orig.tar.xz   
    4c7f1acdb12210b3dadeeff47b130298f74470be 8531044 chromium_144.0   
   7559.59-1~deb12u1.debian.tar.xz   
    a991ee465972bf1bfac16caaf34c656920ec4a99 26825 chromium_144.0.7   
   59.59-1~deb12u1_source.buildinfo   
   Checksums-Sha256:   
    9ee3b77fe8842795ebe2fb8c0fff97686796046749d74a0784e36b74f0e5b74e 4069   
   chromium_144.0.7559.59-1~deb12u1.dsc   
    b55c35e99d664d45cfdb515b7523ee5188e9887338ca13fddab78c2f83f7640e 733515824   
   chromium_144.0.7559.59.orig.tar.xz   
    96c28b06b7030ab20be2f27f83aaf1ff9894c53cb3729c0db10ad68dcef6a2d6 8531044   
   chromium_144.0.7559.59-1~deb12u1.debian.tar.xz   
    85ec49ba5b226c4cba5936f5025f3cf2cc50ad3d5f18aa2ff4d5652578432ab6 26825   
   chromium_144.0.7559.59-1~deb12u1_source.buildinfo   
   Files:   
    cde78e5d774670e42757ac01e6c0bf50 4069 web optional chromium_144   
   0.7559.59-1~deb12u1.dsc   
    ae058beb7bbe9f3af50f46c5486adf66 733515824 web optional chromiu   
   _144.0.7559.59.orig.tar.xz   
    9baa26f654123a895e2e2561b0fcc5e4 8531044 web optional chromium_   
   44.0.7559.59-1~deb12u1.debian.tar.xz   
    61842fcd3f65410d04f36ff59e8e3c60 26825 web optional chromium_14   
   .0.7559.59-1~deb12u1_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAmlnFccUHGRpbGluZ2Vy   
   QGRlYmlhbi5vcmcACgkQZF0CR8NudjfgHw/7BBpGMvDtH8GVzPVR/H6ZjylmFBuE   
   Aya1U/NszE1xKfaFKGUq8fXpQ6C4iitjAhrAReJiiJ17hVUZD9Qsq51ddswzsYyE   
   X9sOORtwer4ps0SCWhx74O6Wh3wh/5HN1i4Do+RwOU3/hVYGQoET8mrpZlg11sxz   
   jo2LntqOwxz1gs5IE+PSWV3MwxBjUE1ieDIK/gWe64EKday6+RFKTpNhV/PK/olG   
   V+VIuMQGXMhf1tYg8PRpjvJmSRpGHHqiEGS5spL1qhmIvTSgXsIzeB55ZGLH8gBv   
   5SW2t2i0o3n+ERviHU9abs8Dm54mGkAqw3Zs0pWrDH+qv3ToqelArkDerT6oAGrt   
   fwY+2D+BsDkdKDSI85kg3lK7E4pPiyJ4ZWyDBftu6pcrmyEy5HXJflXFvsStg1Hd   
   i6feMfb4KWU2cBGGu4I3+OmKo2MSqAHNDAr3DKIUxsODU58QA1uQkHmg6l8lhRkN   
   Cqo5uM5lGSWLym4+vJQy8PKfmY9QlBDutL+ucw/HLehPUEKhgcxwlG4awqn8LKat   
   ZJGTlDUULhhMStHHvXB9RSq/CGuWMm49oaIkXf67wNzTENdduGVZjgvGN8cm3owf   
   JFyLHCtE4QeUQzaH3PaaQUObS1Wvg0MUTZhFlmLjwHRJ7/pWLf7itGmdjV1e6/DW   
   POU9AXCgbi+eo7w=   
   =LCNV   
   -----END PGP SIGNATURE-----   
      
      
   --==============‡38928812941546624=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaXSt0AAKCRCb9qggYcy5   
   IXuZAPkB3LM+c1OQbck+TJWJHllBJ++mQ0cevPV0PsLLqEKBgwEAuLHCkJck899q   
   0Tyy1zxPVYF13WrLVwTgqX4YROqIzQA=q1JE   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)