chromium: update to 156.0.8078.79

To: pkgsrc-wip-changes%NetBSD.org@localhost
Subject: chromium: update to 156.0.8078.79
From: kikadf (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>
Date: Mon, 2 Nov 2026 12:31:49 +0000
Module Name:	pkgsrc-wip
Committed By:	kikadf <kikadf.01%gmail.com@localhost>
Pushed By:	kikadf
Date:		Mon Nov 2 13:31:24 2026 +0100
Changeset:	12ce23857ffd583814f3858d8c9fcbbdfc6308c3

Modified Files:
	chromium/COMMIT_MSG
	chromium/Makefile
	chromium/distinfo

Log Message:
chromium: update to 156.0.8078.79

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=12ce23857ffd583814f3858d8c9fcbbdfc6308c3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 chromium/COMMIT_MSG | 79 ++++++++++++++++-------------------------------------
 chromium/Makefile   |  2 +-
 chromium/distinfo   |  6 ++--
 3 files changed, 28 insertions(+), 59 deletions(-)

diffs:
diff --git a/chromium/COMMIT_MSG b/chromium/COMMIT_MSG
index 5c1e8e8131..6cdfe2367e 100644
--- a/chromium/COMMIT_MSG
+++ b/chromium/COMMIT_MSG
@@ -1,57 +1,26 @@
-chromium: update to 156.0.8078.73
+chromium: update to 156.0.8078.79
 
-* 156.0.8078.73
-This update includes 52 security fixes. Please see the Chrome Security Page for more information.
+* 156.0.8078.79
+This update includes 22 security fixes. Please see the Chrome Security Page for more information.
 
-[N/A][571156746] Critical CVE-2026-118306: Memory corruption in FileSystem. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07
-[TBD][572193211] Critical CVE-2026-118331: Improper input validation in FileAPI. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11
-[N/A][574776938] Critical CVE-2026-118348: Improper input validation in Skia. Reported by Xinyang Ge on 2026-10-17
-[N/A][574852698] Critical CVE-2026-118344: Use after free in Layout. Reported by Xinyang Ge on 2026-10-17
-[N/A][562191732] High CVE-2026-118357: Use after free in FileSystem. Reported by Xinyang Ge on 2026-09-16
-[TBD][565133743] High CVE-2026-118318: Improper access control in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-09-23
-[N/A][567129324] High CVE-2026-118350: Use after free in Turbolev. Reported by OpenAI Codex Security (amyb) on 2026-09-28
-[N/A][567645136] High CVE-2026-118339: Use after free in Animation. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-09-30
-[N/A][568348290] High CVE-2026-118305: Memory corruption in Turbolev. Reported by Google on 2026-10-02
-[N/A][568730797] High CVE-2026-118317: Memory corruption in HTML. Reported by Xinyang Ge on 2026-10-02
-[N/A][568894515] High CVE-2026-118320: Memory corruption in V8. Reported by Google on 2026-10-02
-[N/A][568895029] High CVE-2026-118322: Memory corruption in ANGLE. Reported by Google on 2026-10-02
-[N/A][568900535] High CVE-2026-118329: Improper input validation in ANGLE. Reported by Google on 2026-10-02
-[N/A][568936430] High CVE-2026-118354: Improper input validation in Skia. Reported by Google on 2026-10-03
-[N/A][568936530] High CVE-2026-118340: Memory corruption in Skia. Reported by Google on 2026-10-03
-[N/A][568937139] High CVE-2026-118321: Improper input validation in Core. Reported by Google on 2026-10-03
-[N/A][569286605] High CVE-2026-118337: Improper access control in Forms. Reported by Xinyang Ge on 2026-10-05
-[N/A][569674221] High CVE-2026-118352: Memory corruption in Cache. Reported by Xinyang Ge on 2026-10-05
-[N/A][570638833] High CVE-2026-118355: Improper input validation in Command. Reported by Xinyang Ge on 2026-10-06
-[N/A][570675085] High CVE-2026-118307: Use after free in Paint. Reported by Xinyang Ge on 2026-10-06
-[N/A][570825067] High CVE-2026-118351: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-07
-[TBD][570927027] High CVE-2026-118328: Improper input validation in WebRTC. Reported by Mozilla on 2026-10-07
-[N/A][571147583] High CVE-2026-118333: Missing authorization in Video. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-07
-[TBD][572111820] High CVE-2026-118336: Improper input validation in Headless. Reported by Anonymous on 2026-10-10
-[N/A][572191610] High CVE-2026-118358: Memory corruption in WebAudio. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-10
-[TBD][572312175] High CVE-2026-118353: Use after free in Paint. Reported by Anthropic and Ada Logics on 2026-10-10
-[N/A][572422506] High CVE-2026-118349: Memory corruption in Payments. Reported by Xinyang Ge (Anthropic), assisted by Claude on 2026-10-11
-[TBD][572878518] High CVE-2026-118327: Memory corruption in Media. Reported by Please attribute Anthropic and Ada Logics. on 2026-10-12
-[TBD][573378812] High CVE-2026-118359: Memory corruption in V8. Reported by zenneth (randomguy6407) on 2026-10-14
-[TBD][573389782] High CVE-2026-118343: Improper input validation in ReadingList. Reported by malichamdan on 2026-10-14
-[TBD][573938968] High CVE-2026-118311: Memory corruption in Media. Reported by secbuddy(Ben) on 2026-10-15
-[N/A][574027204] High CVE-2026-118334: Use after free in ImageCapture. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
-[TBD][574030524] High CVE-2026-118332: Improper input validation in Compositing. Reported by e7be95afd6e4ad8d8abc6076c284c79db9e35cc2 on 2026-10-15
-[N/A][574032795] High CVE-2026-118313: Use after free in Video. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
-[N/A][574061024] High CVE-2026-118345: Use after free in PDFium. Reported by OpenAI Codex Security (kylebot) on 2026-10-15
-[TBD][574101376] High CVE-2026-118304: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-15
-[N/A][574223268] High CVE-2026-118316: Improper input validation in V8. Reported by Google on 2026-10-16
-[N/A][574382050] High CVE-2026-118346: Use after free in Compositing. Reported by Google on 2026-10-16
-[N/A][574412629] High CVE-2026-118342: Out of bounds write in Editing. Reported by Google on 2026-10-16
-[N/A][574516887] High CVE-2026-118310: Improper input validation in Views. Reported by Google on 2026-10-16
-[N/A][574606539] High CVE-2026-118335: Improper input validation in Metrics. Reported by Google on 2026-10-16
-[N/A][574791952] High CVE-2026-118308: Use after free in SVG. Reported by Google on 2026-10-17
-[N/A][574803484] High CVE-2026-118314: Improper input validation in UI. Reported by Google on 2026-10-17
-[N/A][574911589] High CVE-2026-118347: Use after free in FileSystem. Reported by Google on 2026-10-17
-[N/A][574911701] High CVE-2026-118341: Use after free in Modularization. Reported by Google on 2026-10-17
-[N/A][575090745] High CVE-2026-118330: Use after free in Browser. Reported by Google on 2026-10-18
-[TBD][575184164] High CVE-2026-118315: Improper input validation in SVG. Reported by Arni Hardarson (Neonix Security) on 2026-10-18
-[TBD][575851252] High CVE-2026-118356: Use after free in WTF. Reported by malichamdan on 2026-10-20
-[N/A][576133777] High CVE-2026-118309: Improper input validation in UI. Reported by Google on 2026-10-21
-[N/A][576194994] High CVE-2026-118319: Memory corruption in Skia. Reported by Xinyang Ge on 2026-10-21
-[N/A][540025369] Medium CVE-2026-118312: Memory corruption in Paint. Reported by Google on 2026-07-28
-[N/A][575826638] Medium CVE-2026-118338: Use after free in Animation. Reported by flapjack-security-bugs-access on 2026-10-20
+[TBD][576215540] Critical CVE-2026-76024: Memory corruption in MediaStream. Reported by Xinyang Ge on 2026-10-21
+[N/A][559780982] High CVE-2026-76025: Use after free in FileSystem. Reported by Google on 2026-09-10
+[N/A][567673200] High CVE-2026-76026: Memory corruption in Autofill. Reported by Google on 2026-09-29
+[N/A][568894475] High CVE-2026-76027: Memory corruption in CacheStorage. Reported by Google on 2026-10-02
+[N/A][569012015] High CVE-2026-76028: Use after free in FileSystem. Reported by Google on 2026-10-03
+[TBD][572055997] High CVE-2026-76029: Memory corruption in Network. Reported by Cristian Di Nicola (crih.exe) (https://crihexe.com) on 2026-10-09
+[TBD][572269631] High CVE-2026-76030: Memory corruption in FileSystem. Reported by huntersnot4 on 2026-10-11
+[TBD][572556403] High CVE-2026-76031: Use after free in Input. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
+[N/A][573264074] High CVE-2026-119260: Use after free in Frames. Reported by Google on 2026-10-13
+[N/A][574213633] High CVE-2026-119261: Improper input validation in Skia. Reported by Google on 2026-10-16
+[TBD][574660146] High CVE-2026-119262: Improper input validation in V8. Reported by Hyeonjun Ahn (@_deayzl) on 2026-10-17
+[N/A][575143870] High CVE-2026-119263: Memory corruption in GarbageCollection. Reported by Xinyang Ge on 2026-10-18
+[TBD][575150692] High CVE-2026-119264: Memory corruption in Dawn. Reported by leegn4a on 2026-10-19
+[N/A][575201795] High CVE-2026-119265: Memory corruption in Quota. Reported by Google on 2026-10-19
+[N/A][575202553] High CVE-2026-119266: Use after free in Quota. Reported by Google on 2026-10-19
+[TBD][576203565] High CVE-2026-119267: Memory corruption in DOM. Reported by Xinyang Ge on 2026-10-21
+[N/A][576984708] High CVE-2026-119268: Integer overflow in Editing. Reported by Xinyang Ge on 2026-10-23
+[N/A][577072000] High CVE-2026-119269: Use after free in Blink. Reported by Google on 2026-10-23
+[N/A][577333729] High CVE-2026-119270: Improper input validation in CacheStorage. Reported by Google on 2026-10-24
+[N/A][577403270] High CVE-2026-119271: Use after free in Skia. Reported by Google on 2026-10-24
+[N/A][569012543] Medium CVE-2026-119272: Out of bounds read in FileSystem. Reported by Google on 2026-10-03
diff --git a/chromium/Makefile b/chromium/Makefile
index d810be44c5..74b3acffd0 100644
--- a/chromium/Makefile
+++ b/chromium/Makefile
@@ -1,7 +1,7 @@
 # $NetBSD: Makefile,v 1.80 2026/09/05 19:10:04 bsiegert Exp $
 
 DISTNAME=			chromium-${VERSION}
-VERSION=			156.0.8078.73
+VERSION=			156.0.8078.79
 CATEGORIES=			www
 MASTER_SITES=			https://commondatastorage.googleapis.com/chromium-browser-official/
 #MASTER_SITES=			${MASTER_SITE_GITHUB:=chromium-linux-tarballs/}chromium-tarballs/releases/download/${VERSION}/
diff --git a/chromium/distinfo b/chromium/distinfo
index 32e449cda1..7e8ce1493b 100644
--- a/chromium/distinfo
+++ b/chromium/distinfo
@@ -1,8 +1,8 @@
 $NetBSD: distinfo,v 1.57 2026/09/02 13:13:20 kikadf Exp $
 
-BLAKE2s (chromium-156.0.8078.73-lite.tar.xz) = 6f54bdbd25232b4e5d13fec3a1064fabce61df0afe82d64e1bdc13958018657a
-SHA512 (chromium-156.0.8078.73-lite.tar.xz) = da6b9cf4615cc7872674ea41430d61ae04ce63b0d2e5ef7bde5d86631f4a8e9d294c5b59e9ed303161f6b35ffe43d7875f8ea4c77a994a6e88b6f32d154b2739
-Size (chromium-156.0.8078.73-lite.tar.xz) = 2009545268 bytes
+BLAKE2s (chromium-156.0.8078.79-lite.tar.xz) = b3af8fa53e9571660a383682cfda3191d3e022c9fc34f8d1be435166e85a9f4b
+SHA512 (chromium-156.0.8078.79-lite.tar.xz) = 4b228254812038f1f652d5b320408e369e0fc333d3e96a306618b98d04e1a5bf72cda11dcf103111fd65ce5d0c784bb15bc97f80773e8a630ba0693399cbd514
+Size (chromium-156.0.8078.79-lite.tar.xz) = 2009554628 bytes
 BLAKE2s (evanw-esbuild-v0.28.2.tar.gz) = 0a4c994d6121c5b7d2615c7ad1759a8e76822c61a1c632349e6cb03feb3b0b36
 SHA512 (evanw-esbuild-v0.28.2.tar.gz) = c4cb2ef32e147ebc5099ab501ebcb5fb4e3f16a143a0fd1f9b74efb90e0c24309ab61b236b6e6cf86a235187368bed660ae19403bbda9a84328157fe45ffc5b8
 Size (evanw-esbuild-v0.28.2.tar.gz) = 2008796 bytes
Prev by Date: nim: move back to nim-lang master site and explain the packaging in a comment
Next by Date: nim: remove code block because it doesn't have any effect on the installation process
Previous by Thread: nim: move back to nim-lang master site and explain the packaging in a comment
Next by Thread: nim: remove code block because it doesn't have any effect on the installation process
Indexes:
Home | Main Index | Thread Index | Old Index