-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 28 Jan 2026 20:19:05 -0500 Source: chromium Architecture: source Version: 144.0.7559.109-1~deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (144.0.7559.109-1~deb12u1) bookworm-security; urgency=high . * New upstream security release. - CVE-2026-1504: Inappropriate implementation in Background Fetch API. Reported by Luan Herrera (@lbherrera_). Checksums-Sha1: 678462d20b59996b6816d94fdbdc72978afd1eb8 4053 chromium_144.0.7559.109-1~deb12u1.dsc 04842f0d663eb5b6d5cfe4c2c161dda0ccd3bf37 735656840 chromium_144.0.7559.109.orig.tar.xz c7bc185057ddb8039c4edb8c72f4cb5d52ae10e2 8531244 chromium_144.0.7559.109-1~deb12u1.debian.tar.xz bbf8231e9e6a462dca9e156cdcf8989a14194428 26829 chromium_144.0.7559.109-1~deb12u1_source.buildinfo Checksums-Sha256: 21373e33dbd0ef0090af9634ba73e66d13843a5c00bbf947602071b3318c6d19 4053 chromium_144.0.7559.109-1~deb12u1.dsc 9181591401abdf2d825571a6a1666b98128f2ea09dd33e98d22dffa71866391c 735656840 chromium_144.0.7559.109.orig.tar.xz 10868a5645cce62cbe9f28caf59567fd0a40c481a1f2baf8ae513dde2f90a3a6 8531244 chromium_144.0.7559.109-1~deb12u1.debian.tar.xz c51b5896959f4b29c09a99a5ee6369e8e02e55cc3083f88cbd708279f33c6443 26829 chromium_144.0.7559.109-1~deb12u1_source.buildinfo Files: 7d8cd2f5547e48a25da9981777bfece8 4053 web optional chromium_144.0.7559.109-1~deb12u1.dsc 09031670b0bf75ca321acaf31ce7ff60 735656840 web optional chromium_144.0.7559.109.orig.tar.xz e2e4f90a8189c34cc60034f0c0e4890f 8531244 web optional chromium_144.0.7559.109-1~deb12u1.debian.tar.xz 0185594dc3f4f9f635828fe556fe2761 26829 web optional chromium_144.0.7559.109-1~deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAml70GYUHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8NudjchLg/7BVOcbdtu6/eooJ6DvVFnmrbzmiKH grk661NClwUJT/qJeKR4Zg2Ir8Gm+49hVhm0/ZZ4rJRt0V+ekdIHnjRGlVOiUvGu n3ZSVijho4ga8DQhYSXlXe0XgXj9hw8aAVuIFVyTggZ5V4FilJPvUvMVBcbOwBE+ koA55E5sM/TcVsLrVuMIkfwHzaINpYrb0C80XsRzDW+NdNtYgvvlR19vVStT3xKf FKPr5KdAgNs5z3pHg2aGrzr+oSR0YPAccWigBS74E+s7PXcSlMX/nazCDwUZoJ2J 579bLrnyUkQ3aAu9YJ1bwzDXkngD/M6ldqPuesqRG3jGFLQDAHGcJWH0e7Wsop9v M+4iIDCu9RTN0695NcPoBispzxvPss+gP/NIkIar2LSt4ybp9FowZjWqoZ96+f/K 9xe8MAbAvXbhUxsevCjZ86bf1QIWnVVOBbC3P8UNZJdgewiwbadEKvtfWdVqX9+i joCQYBptLzmcYgDo79L3ezre835gGcZYdC5k5CVBKSxhsM+N8+zTzgV7mzQIwmQL YE4SuqBfrTh75NJHRo9WLhTBeWjypz25JG5TKx2V1LOO0AgdxGGxEy8fhaGWYBn1 JPzCHmVxRm4uFe7WVSr1spW2gz7ZDcdwn/w2lp7jFzBzgsJ8xzFsBmA4ukvxtO3s YxmlePe9jwjMeSg= =9Mmw -----END PGP SIGNATURE-----