-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 28 Jan 2026 20:19:05 -0500 Source: chromium Architecture: source Version: 144.0.7559.109-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Chromium Team Changed-By: Andres Salomon Changes: chromium (144.0.7559.109-1~deb13u1) trixie-security; urgency=high . * New upstream security release. - CVE-2026-1504: Inappropriate implementation in Background Fetch API. Reported by Luan Herrera (@lbherrera_). Checksums-Sha1: a5effdb7eb197ea6de77d5efafa355acd8d81851 4084 chromium_144.0.7559.109-1~deb13u1.dsc 04842f0d663eb5b6d5cfe4c2c161dda0ccd3bf37 735656840 chromium_144.0.7559.109.orig.tar.xz 4389312fabb9b405bff44227de017af12a553c9b 443980 chromium_144.0.7559.109-1~deb13u1.debian.tar.xz 3b93a3a4372896a8936dad02493626727b3e9a13 26768 chromium_144.0.7559.109-1~deb13u1_source.buildinfo Checksums-Sha256: e3281834b1ed6a73398e8595ec6534e6666647e31a5218b4a59eb8489fd1d4d8 4084 chromium_144.0.7559.109-1~deb13u1.dsc 9181591401abdf2d825571a6a1666b98128f2ea09dd33e98d22dffa71866391c 735656840 chromium_144.0.7559.109.orig.tar.xz 74632c3ad097dcf442a4ac3bc72a04684b8e88781ae691aa44ca343d95f52141 443980 chromium_144.0.7559.109-1~deb13u1.debian.tar.xz 2f88b5c3acec2556b077e673b6670dcd1b98fc918f4d2079e79770b31f6a15dc 26768 chromium_144.0.7559.109-1~deb13u1_source.buildinfo Files: 6083d574b6b9b060b0599fe9c843ff8b 4084 web optional chromium_144.0.7559.109-1~deb13u1.dsc 09031670b0bf75ca321acaf31ce7ff60 735656840 web optional chromium_144.0.7559.109.orig.tar.xz f674590b58dd9e6be28334eedda3b98e 443980 web optional chromium_144.0.7559.109-1~deb13u1.debian.tar.xz 9fbb551780ad025c88e3844c21484d0d 26768 web optional chromium_144.0.7559.109-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEUAUk+X1YiTIjs19qZF0CR8NudjcFAml7n34UHGRpbGluZ2Vy QGRlYmlhbi5vcmcACgkQZF0CR8Nudje0WRAAmIEjTGOSdE7+h9wXKjLWau07zRj0 +GycQL9L9eelOqt7FBKjEEROJzuviRo6yfhwU6Vu5BwnfNoYNKW5zb/GtM0A1pox tRQT3PDo5cCrmrb98HfvePlfe7Nj1x2BZLZPRSOgTRRPz+buPLi2Ee1LJg8Pbszn By8KNxPpKEb4tWBIj1tkjsnv5J+JSuWKNEQVNfXnJWOMU8/GyegqjIJCMoGIdPya +ICwRnj6bfMdVK6vdrheM/WAQCrVgEf3bOQqVhDXPZjMTuoChzFpm4cjOOOswa8H /CJNTZVpmc3gcjhhhspzi4dhDmNIYI7mG6WUS9Kry8v79K09y1w59s45OxVGRTxW hSIULYtwH9GWBSbXHArBoXcxfdXNo/fE1+0lg+KH+aWFx0akzJi3n+3XxtPNETOH Hy9s0l5O/pxjxnuB4+sHh1Pvq6m151/50HhbkuXNDbKNadFw5afdddz6shOEdove SNECvkqziFwbe5r3Ja1NlNFErLpoUUQP54v/kBq8lLc7+k2SbuISvxNy2Aea72oG IM5oTYgUL7H4gKp8rC9xSZg3iHYIfGbqj1HwBYBjQj6aa2k5cvvEpl9JYburNpXM zY5ohoOMhVdsHs5q8IgRMFi0dol/0WRA2H4gUfymWJCY+ixA6arTFOSo7RZ1mEjZ n+yAYVRDpSGT6Zc= =Fbg8 -----END PGP SIGNATURE-----