CVS commit: pkgsrc/www/chromium

["Robert Bagdan" <kikadf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kikadf
Date:           Fri Aug 21 15:04:58 UTC 2026

Modified Files:
        pkgsrc/www/chromium: Makefile distinfo
        pkgsrc/www/chromium/patches:
            patch-chrome_browser_first__run_first__run.h

Log Message:
chromium: update to 151.0.7922.173

* 151.0.7922.173
This update includes 7 security fixes. Please see the Chrome Security Page for more information.

[N/A][522819252] Critical CVE-2026-76017: Use after free in Chromoting. Reported by Google on 2026-06-11
[N/A][513757918] High CVE-2026-76018: Privilege elevation in Import. Reported by Google on 2026-05-16
[TBD][539032888] High CVE-2026-76019: Incorrect authorization in Workers. Reported by Anonymous on 2026-07-26
[TBD][541837151] High CVE-2026-76020: Race condition in V8. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-03
[N/A][541854084] High CVE-2026-76021: Use after free in DOM. Reported by Google BigSleep@Grape on 2026-08-02
[TBD][543798025] High CVE-2026-76022: Buffer overflow in Network. Reported by 0xAlessandro on 2026-08-07
[TBD][545124048] High CVE-2026-76023: Improper resource control in Linux Toolkit Theming. Reported by Keita Sode and Daisuke Hatakeyama of SYZD Research on 2026-08-11

* 151.0.7922.169
This update includes 15 security fixes. Please see the Chrome Security Page for more information.

[N/A][534923522] Critical CVE-2026-76034: Buffer overflow in WebGL. Reported by Google on 2026-07-15
[N/A][540087398] Critical CVE-2026-76036: Buffer overflow in Dawn. Reported by Google on 2026-07-28
[N/A][516715010] High CVE-2026-76033: Inappropriate implementation in CORS. Reported by Google on 2026-05-26
[N/A][517612295] High CVE-2026-76037: Link following in CredentialProvider. Reported by Google on 2026-05-28
[N/A][522732244] High CVE-2026-76044: Race condition in USB. Reported by Google on 2026-06-11
[N/A][525167753] High CVE-2026-76039: Incorrect reference resolution in Core. Reported by Google on 2026-06-18
[N/A][534862220] High CVE-2026-76040: Use after free in Browser. Reported by Google on 2026-07-14
[N/A][536439844] High CVE-2026-76035: Inappropriate implementation in Media. Reported by Google on 2026-07-19
[N/A][536460270] High CVE-2026-76042: Use of uninitialized resource in GPU. Reported by Google on 2026-07-19
[N/A][536581050] High CVE-2026-76046: Buffer overflow in ANGLE. Reported by Google on 2026-07-19
[TBD][539350801] High CVE-2026-76043: Incorrect calculation in V8. Reported by Raghav Maheshwari on 2026-07-27
[N/A][540027341] High CVE-2026-76041: Information leak in Skia. Reported by Google on 2026-07-28
[TBD][541251902] High CVE-2026-76047: Type confusion in V8. Reported by ywatanabee on 2026-07-31
[TBD][541926503] High CVE-2026-76038: Type confusion in V8. Reported by un3xploitable && GF on 2026-08-03
[TBD][543082390] High CVE-2026-76045: Use after free in WebGL. Reported by OpenAI Codex Security (amyb) on 2026-08-05


To generate a diff of this commit:
cvs rdiff -u -r1.74 -r1.75 pkgsrc/www/chromium/Makefile
cvs rdiff -u -r1.55 -r1.56 pkgsrc/www/chromium/distinfo
cvs rdiff -u -r1.9 -r1.10 \
    pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/chromium/Makefile
diff -u pkgsrc/www/chromium/Makefile:1.74 pkgsrc/www/chromium/Makefile:1.75
--- pkgsrc/www/chromium/Makefile:1.74   Sat Aug 15 12:53:38 2026
+++ pkgsrc/www/chromium/Makefile        Fri Aug 21 15:04:58 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.74 2026/08/15 12:53:38 bsiegert Exp $
+# $NetBSD: Makefile,v 1.75 2026/08/21 15:04:58 kikadf Exp $
 
 DISTNAME=                      chromium-${VERSION}
-VERSION=                       151.0.7922.137
-PKGREVISION=                   1
+VERSION=                       151.0.7922.173
 CATEGORIES=                    www
 MASTER_SITES=                  https://commondatastorage.googleapis.com/chromium-browser-official/
 EXTRACT_SUFX_C=                        .tar.xz

Index: pkgsrc/www/chromium/distinfo
diff -u pkgsrc/www/chromium/distinfo:1.55 pkgsrc/www/chromium/distinfo:1.56
--- pkgsrc/www/chromium/distinfo:1.55   Fri Aug 14 16:37:52 2026
+++ pkgsrc/www/chromium/distinfo        Fri Aug 21 15:04:58 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.55 2026/08/14 16:37:52 kikadf Exp $
+$NetBSD: distinfo,v 1.56 2026/08/21 15:04:58 kikadf Exp $
 
 BLAKE2s (ahash-0.8.12.crate) = 157e4e2836883526fa391419f08c2aa4c932fb96ddf2b254bb436193691754c4
 SHA512 (ahash-0.8.12.crate) = 872e5fa0d1334abac96d10eca18f32c2b1a1e0b38671c132b6effd029e9f0147ddcef79f4d85c8baf0537ddfb8c39a85f61d073e1fb3143dba659a8385641e1b
@@ -66,12 +66,12 @@ Size (cc-1.2.61.crate) = 97163 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes
-BLAKE2s (chromium-151.0.7922.137-lite.tar.xz) = 7ba5b403bc28140df645c2f92b414a940d4c2339a59d17a7f0b8f04044ff8974
-SHA512 (chromium-151.0.7922.137-lite.tar.xz) = 61ec7b654342a68394ff0907e5b344d97cecbca2bced851e4ead0fa93f05f7b2d6d8dc8953cc7d86204ddcf49a3b2f401626b79cbcf4b023628a721d6c543b29
-Size (chromium-151.0.7922.137-lite.tar.xz) = 1712008940 bytes
-BLAKE2s (chromium-151.0.7922.137-testdata.tar.xz) = e94c71794ab9cdc58b43802b44648392d995f090678737c39b17fb332936d5b7
-SHA512 (chromium-151.0.7922.137-testdata.tar.xz) = 918adbad034b5e083c9e211a908e8e8aee57e792f8267f2b14adcad46ff21cefed1dd187c18cbd5bd79d72202c11515177df73469312ea7e8274f5d824bfc340
-Size (chromium-151.0.7922.137-testdata.tar.xz) = 1305247952 bytes
+BLAKE2s (chromium-151.0.7922.173-lite.tar.xz) = 7b287613625ee0cfa6a885b1820d10ea3b996f13b685d85d9c80ecf26627fb3b
+SHA512 (chromium-151.0.7922.173-lite.tar.xz) = aa121805df437cf59e108c7a519edc3f43d391a5537f69176c23685f525288dc20d211849f9714c01fcb76a00b3f6033987b80ce98bbfe399774f063b698a985
+Size (chromium-151.0.7922.173-lite.tar.xz) = 1712173636 bytes
+BLAKE2s (chromium-151.0.7922.173-testdata.tar.xz) = 3378f4cd1bada15b16663749d13750bb9e91593a49499f746b4a9d0585980ed2
+SHA512 (chromium-151.0.7922.173-testdata.tar.xz) = 9150e7ecc696df10d36676dbc3ab48502f90951c3e6c76851dc50dd1740e5e530e5569752c167333de51e3727eb1b8ef31dfde14164796a160aa0cfea5fdb7c0
+Size (chromium-151.0.7922.173-testdata.tar.xz) = 1305407120 bytes
 BLAKE2s (cmake-0.1.58.crate) = a4568b73f30075a127114fb24a891b182573483d81080643888ecbd5e954efe7
 SHA512 (cmake-0.1.58.crate) = 49420a5d7d71ddccc21b71373769e1e28ab98c9af1a0c5d59fc3127e6dcc45cb1b7c6b5a37c9110907daceda7fd10bb59344f2bb8f041b18d62b16c22c5d0d60
 Size (cmake-0.1.58.crate) = 20474 bytes
@@ -886,7 +886,7 @@ SHA1 (patch-chrome_browser_feedback_syst
 SHA1 (patch-chrome_browser_feedback_system__logs_chrome__system__logs__fetcher.cc) = 70ff94a73bd00de0eeff56c1c804436f2e92e307
 SHA1 (patch-chrome_browser_file__system__access_chrome__file__system__access__permission__context.cc) = 1b2007dfe8cc521d32bc6bce6006d13c13af8248
 SHA1 (patch-chrome_browser_first__run_first__run.cc) = 3ac0309b205f6163823227441ddbcdf4aa04b2be
-SHA1 (patch-chrome_browser_first__run_first__run.h) = f02b9207ba5d906b608f32a6aaa7a16752d0fe0f
+SHA1 (patch-chrome_browser_first__run_first__run.h) = 6a43d0cdf5c805fc6405c58b0de14debf69fe335
 SHA1 (patch-chrome_browser_first__run_first__run__dialog.h) = 5f02340efa9d7b20ffaeea5e584e1795b5f6526d
 SHA1 (patch-chrome_browser_first__run_first__run__internal.h) = 1e610c248e093ff297e4dfef436bc7f1d8ac7331
 SHA1 (patch-chrome_browser_flag__descriptions.h) = 85fa0c672ca5aded74c2bb74893155815573efee

Index: pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h
diff -u pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h:1.9 pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h:1.10
--- pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h:1.9        Sun Aug  9 06:31:08 2026
+++ pkgsrc/www/chromium/patches/patch-chrome_browser_first__run_first__run.h    Fri Aug 21 15:04:58 2026
@@ -1,4 +1,4 @@
-$NetBSD: patch-chrome_browser_first__run_first__run.h,v 1.9 2026/08/09 06:31:08 kikadf Exp $
+$NetBSD: patch-chrome_browser_first__run_first__run.h,v 1.10 2026/08/21 15:04:58 kikadf Exp $
 
 * Part of patchset to build chromium on NetBSD
 * Based on OpenBSD's chromium patches, and
@@ -12,7 +12,7 @@ $NetBSD: patch-chrome_browser_first__run
  #endif
 -#if BUILDFLAG(IS_LINUX)
 +#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_BSD)
-   bool eula_required = false;
+   bool eula_required = true;
  #endif
  };
 @@ -145,7 +145,7 @@ ProcessInitialPreferencesResult ProcessI