pkgsrc-WIP-changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
chromium: update to 156.0.8078.73
Module Name: pkgsrc-wip
Committed By: kikadf <kikadf.01%gmail.com@localhost>
Pushed By: kikadf
Date: Wed Oct 28 16:52:45 2026 +0100
Changeset: 6f42ee3ce7ecca84430a57b41e9050c2b6e13811
Modified Files:
chromium/COMMIT_MSG
chromium/Makefile
chromium/TODO
chromium/distinfo
Log Message:
chromium: update to 156.0.8078.73
To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=6f42ee3ce7ecca84430a57b41e9050c2b6e13811
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
diffstat:
chromium/COMMIT_MSG | 59 +++++++++++++++++++++++++++++++++++++++++++++++++----
chromium/Makefile | 2 +-
chromium/TODO | 7 +------
chromium/distinfo | 6 +++---
4 files changed, 60 insertions(+), 14 deletions(-)
diffs:
diff --git a/chromium/COMMIT_MSG b/chromium/COMMIT_MSG
index 48c56f7633..5c1e8e8131 100644
--- a/chromium/COMMIT_MSG
+++ b/chromium/COMMIT_MSG
@@ -1,6 +1,57 @@
-chromium: update to 156.0.8078.47
+chromium: update to 156.0.8078.73
-* 156.0.8078.47
-This update includes 353 security fixes. Please see the Chrome Security Page for more information.
+* 156.0.8078.73
+This update includes 52 security fixes. Please see the Chrome Security Page for more information.
-See: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02018666648.html
+[N/A][571156746] Critical CVE-2026-118306: Memory corruption in FileSystem. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07
+[TBD][572193211] Critical CVE-2026-118331: Improper input validation in FileAPI. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11
+[N/A][574776938] Critical CVE-2026-118348: Improper input validation in Skia. Reported by Xinyang Ge on 2026-10-17
+[N/A][574852698] Critical CVE-2026-118344: Use after free in Layout. Reported by Xinyang Ge on 2026-10-17
+[N/A][562191732] High CVE-2026-118357: Use after free in FileSystem. Reported by Xinyang Ge on 2026-09-16
+[TBD][565133743] High CVE-2026-118318: Improper access control in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-09-23
+[N/A][567129324] High CVE-2026-118350: Use after free in Turbolev. Reported by OpenAI Codex Security (amyb) on 2026-09-28
+[N/A][567645136] High CVE-2026-118339: Use after free in Animation. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30
+[N/A][568348290] High CVE-2026-118305: Memory corruption in Turbolev. Reported by Google on 2026-10-02
+[N/A][568730797] High CVE-2026-118317: Memory corruption in HTML. Reported by Xinyang Ge on 2026-10-02
+[N/A][568894515] High CVE-2026-118320: Memory corruption in V8. Reported by Google on 2026-10-02
+[N/A][568895029] High CVE-2026-118322: Memory corruption in ANGLE. Reported by Google on 2026-10-02
+[N/A][568900535] High CVE-2026-118329: Improper input validation in ANGLE. Reported by Google on 2026-10-02
+[N/A][568936430] High CVE-2026-118354: Improper input validation in Skia. Reported by Google on 2026-10-03
+[N/A][568936530] High CVE-2026-118340: Memory corruption in Skia. Reported by Google on 2026-10-03
+[N/A][568937139] High CVE-2026-118321: Improper input validation in Core. Reported by Google on 2026-10-03
+[N/A][569286605] High CVE-2026-118337: Improper access control in Forms. Reported by Xinyang Ge on 2026-10-05
+[N/A][569674221] High CVE-2026-118352: Memory corruption in Cache. Reported by Xinyang Ge on 2026-10-05
+[N/A][570638833] High CVE-2026-118355: Improper input validation in Command. Reported by Xinyang Ge on 2026-10-06
+[N/A][570675085] High CVE-2026-118307: Use after free in Paint. Reported by Xinyang Ge on 2026-10-06
+[N/A][570825067] High CVE-2026-118351: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-07
+[TBD][570927027] High CVE-2026-118328: Improper input validation in WebRTC. Reported by Mozilla on 2026-10-07
+[N/A][571147583] High CVE-2026-118333: Missing authorization in Video. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07
+[TBD][572111820] High CVE-2026-118336: Improper input validation in Headless. Reported by Anonymous on 2026-10-10
+[N/A][572191610] High CVE-2026-118358: Memory corruption in WebAudio. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-10
+[TBD][572312175] High CVE-2026-118353: Use after free in Paint. Reported by Anthropic and Ada Logics on 2026-10-10
+[N/A][572422506] High CVE-2026-118349: Memory corruption in Payments. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11
+[TBD][572878518] High CVE-2026-118327: Memory corruption in Media. Reported by Please attribute Anthropic and Ada Logics. on 2026-10-12
+[TBD][573378812] High CVE-2026-118359: Memory corruption in V8. Reported by zenneth (randomguy6407) on 2026-10-14
+[TBD][573389782] High CVE-2026-118343: Improper input validation in ReadingList. Reported by malichamdan on 2026-10-14
+[TBD][573938968] High CVE-2026-118311: Memory corruption in Media. Reported by secbuddy(Ben) on 2026-10-15
+[N/A][574027204] High CVE-2026-118334: Use after free in ImageCapture. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
+[TBD][574030524] High CVE-2026-118332: Improper input validation in Compositing. Reported by e7be95afd6e4ad8d8abc6076c284c79db9e35cc2 on 2026-10-15
+[N/A][574032795] High CVE-2026-118313: Use after free in Video. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
+[N/A][574061024] High CVE-2026-118345: Use after free in PDFium. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
+[TBD][574101376] High CVE-2026-118304: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-15
+[N/A][574223268] High CVE-2026-118316: Improper input validation in V8. Reported by Google on 2026-10-16
+[N/A][574382050] High CVE-2026-118346: Use after free in Compositing. Reported by Google on 2026-10-16
+[N/A][574412629] High CVE-2026-118342: Out of bounds write in Editing. Reported by Google on 2026-10-16
+[N/A][574516887] High CVE-2026-118310: Improper input validation in Views. Reported by Google on 2026-10-16
+[N/A][574606539] High CVE-2026-118335: Improper input validation in Metrics. Reported by Google on 2026-10-16
+[N/A][574791952] High CVE-2026-118308: Use after free in SVG. Reported by Google on 2026-10-17
+[N/A][574803484] High CVE-2026-118314: Improper input validation in UI. Reported by Google on 2026-10-17
+[N/A][574911589] High CVE-2026-118347: Use after free in FileSystem. Reported by Google on 2026-10-17
+[N/A][574911701] High CVE-2026-118341: Use after free in Modularization. Reported by Google on 2026-10-17
+[N/A][575090745] High CVE-2026-118330: Use after free in Browser. Reported by Google on 2026-10-18
+[TBD][575184164] High CVE-2026-118315: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-18
+[TBD][575851252] High CVE-2026-118356: Use after free in WTF. Reported by malichamdan on 2026-10-20
+[N/A][576133777] High CVE-2026-118309: Improper input validation in UI. Reported by Google on 2026-10-21
+[N/A][576194994] High CVE-2026-118319: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-21
+[N/A][540025369] Medium CVE-2026-118312: Memory corruption in Paint. Reported by Google on 2026-07-28
+[N/A][575826638] Medium CVE-2026-118338: Use after free in Animation. Reported by flapjack-security-bugs-access on 2026-10-20
diff --git a/chromium/Makefile b/chromium/Makefile
index 30cf272658..d810be44c5 100644
--- a/chromium/Makefile
+++ b/chromium/Makefile
@@ -1,7 +1,7 @@
# $NetBSD: Makefile,v 1.80 2026/09/05 19:10:04 bsiegert Exp $
DISTNAME= chromium-${VERSION}
-VERSION= 156.0.8078.47
+VERSION= 156.0.8078.73
CATEGORIES= www
MASTER_SITES= https://commondatastorage.googleapis.com/chromium-browser-official/
#MASTER_SITES= ${MASTER_SITE_GITHUB:=chromium-linux-tarballs/}chromium-tarballs/releases/download/${VERSION}/
diff --git a/chromium/TODO b/chromium/TODO
index 7334163651..fe3a9801e8 100644
--- a/chromium/TODO
+++ b/chromium/TODO
@@ -1,6 +1 @@
-1) Random hangs.
- Killing the network process restarts it, but the next hang still occurs.
- GDB: all threads are waiting; no wakeup ever comes.
-
-2) tests.mk
- Broken. It never worked completely. Fix or remove?
+1) Qt theme
diff --git a/chromium/distinfo b/chromium/distinfo
index 196c87ba79..32e449cda1 100644
--- a/chromium/distinfo
+++ b/chromium/distinfo
@@ -1,8 +1,8 @@
$NetBSD: distinfo,v 1.57 2026/09/02 13:13:20 kikadf Exp $
-BLAKE2s (chromium-156.0.8078.47-lite.tar.xz) = e5e49356aa7ec641c4e90b62a3aeee1838323a4d92d65ce2d5dd0793c5ba0ead
-SHA512 (chromium-156.0.8078.47-lite.tar.xz) = 798ec60ea2761cec31f88e8f6e34b47ae6d34c1132f6213e6655414622e8584e8e4254e3347dcecb5419408c00bd3e6fbcc4628df5c988e6baea484c6ff2a8d4
-Size (chromium-156.0.8078.47-lite.tar.xz) = 2009127748 bytes
+BLAKE2s (chromium-156.0.8078.73-lite.tar.xz) = 6f54bdbd25232b4e5d13fec3a1064fabce61df0afe82d64e1bdc13958018657a
+SHA512 (chromium-156.0.8078.73-lite.tar.xz) = da6b9cf4615cc7872674ea41430d61ae04ce63b0d2e5ef7bde5d86631f4a8e9d294c5b59e9ed303161f6b35ffe43d7875f8ea4c77a994a6e88b6f32d154b2739
+Size (chromium-156.0.8078.73-lite.tar.xz) = 2009545268 bytes
BLAKE2s (evanw-esbuild-v0.28.2.tar.gz) = 0a4c994d6121c5b7d2615c7ad1759a8e76822c61a1c632349e6cb03feb3b0b36
SHA512 (evanw-esbuild-v0.28.2.tar.gz) = c4cb2ef32e147ebc5099ab501ebcb5fb4e3f16a143a0fd1f9b74efb90e0c24309ab61b236b6e6cf86a235187368bed660ae19403bbda9a84328157fe45ffc5b8
Size (evanw-esbuild-v0.28.2.tar.gz) = 2008796 bytes
Home |
Main Index |
Thread Index |
Old Index