-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 13 Jan 2026 22:11:21 -0500
Source: chromium
Binary: chromium-l10n
Architecture: all
Version: 144.0.7559.59-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Andres Salomon <dilinger@debian.org>
Description:
 chromium-l10n - web browser - language packs
Changes:
 chromium (144.0.7559.59-1~deb12u1) bookworm-security; urgency=high
 .
   [ Andres Salomon ]
   * New upstream stable release.
     - CVE-2026-0899: Out of bounds memory access in V8. Reported by @p1nky4745.
     - CVE-2026-0900: Inappropriate implementation in V8. Reported by Google.
     - CVE-2026-0901: Inappropriate implementation in Blink.
       Reported by Irvan Kurniawan (sourc7).
     - CVE-2026-0902: Inappropriate implementation in V8. Reported by 303f06e3.
     - CVE-2026-0903: Insufficient validation of untrusted input in Downloads.
       Reported by Azur.
     - CVE-2026-0904: Incorrect security UI in Digital Credentials.
       Reported by Hafiizh.
     - CVE-2026-0905: Insufficient policy enforcement in Network.
       Reported by Google.
     - CVE-2026-0906: Incorrect security UI. Reported by Khalil Zhani.
     - CVE-2026-0907: Incorrect security UI in Split View. Reported by Hafiizh.
     - CVE-2026-0908: Use after free in ANGLE. Reported by Glitchers BoB 14th.
   * d/copyright: delete a copy of clang-22 in the openscreen build directory.
   * d/control: add rustfmt-web as a build dependency.
   * d/rules: make DEB_BUILD_OPTIONS=terse work.
   * d/patches:
     - disable/tests.patch: refresh.
     - trixie/rust-sanitize.patch: refresh.
     - bookworm/bindgen.patch: refresh.
     - fixes/force-rust-nightly.patch: add workaround to force
       rustc_nightly_capability, as we're using an up-to-date rust.
     - trixie/value-or.patch: add clang-19 workarounds to help
       calling value_or() with ambiguous values.
     - fixes/autofill-binarypb.patch: add patch to fix build for us stripping
       out binary-only files containing city/state autofill aliases.
     - bookworm/path-rustfmt.patch: add patch to override search path for
       rustfmt (which chromium deduces incorrectly due to our bundled
       bindgen in bookworm).
 .
   [ Daniel Richard G. ]
   * d/patches:
     - trixie/adler1.patch: Refresh to follow use of if-else.
     - trixie/libxml2-no-xxe.patch: Add workaround for older libxml2.
     - bookworm/eslint.patch: Refresh, and add another import.meta.dirname
       conversion.
 .
   [ Timothy Pearson ]
   * d/patches:
     - trixie/nodejs-set-intersection.patch: avoid using node >=22 intersection
   * d/patches/ppc64le:
     - ppc64le/third_party/0002-regenerate-xnn-buildgn.patch: Regenerate from
       upstream sources
     - fixes/fix-clang-selection.patch: Drop due to upstream changes
Checksums-Sha1:
 9a0e9f059b88d0c43e23de9622fe01a14ee1e816 8566428 chromium-l10n_144.0.7559.59-1~deb12u1_all.deb
 a1846b93ec91c96e0c09aaf5c11c72e33440a7d0 26878 chromium_144.0.7559.59-1~deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 0b075df5f49b1706a3e44887f368be472fac3978338c749d1e4fa60b75882fe7 8566428 chromium-l10n_144.0.7559.59-1~deb12u1_all.deb
 126ca03104c12278ed24eff17dd9e868d74535aa42bb109583136883bc7f4fb5 26878 chromium_144.0.7559.59-1~deb12u1_all-buildd.buildinfo
Files:
 913c7879be3bdbfb5876f6a6d0ce0940 8566428 localization optional chromium-l10n_144.0.7559.59-1~deb12u1_all.deb
 18f05b359edf3ac5652be2dc078f3c17 26878 web optional chromium_144.0.7559.59-1~deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=YmSF
-----END PGP SIGNATURE-----