CVS commit: pkgsrc/www/chromium

["Robert Bagdan" <kikadf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kikadf
Date:           Sat Mar 21 16:28:15 UTC 2026

Modified Files:
        pkgsrc/www/chromium: Makefile distinfo
Removed Files:
        pkgsrc/www/chromium/patches:
            patch-chrome_browser_ui_views_frame_multi__contents__view__drop__target__controller.h

Log Message:
www/chromium: update to 146.0.7680.153

* 146.0.7680.153
This update includes 26 security fixes. Please see the
Chrome Security Page for more information.
[TBD][475877320] Critical CVE-2026-4439: Out of bounds memory access
in WebGL. Reported by Goodluck on 2026-01-15
[TBD][485935305] Critical CVE-2026-4440: Out of bounds read and write
in WebGL. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-20
[TBD][489381399] Critical CVE-2026-4441: Use after free in Base.
Reported by Google on 2026-03-03
[TBD][484751092] High CVE-2026-4442: Heap buffer overflow in CSS.
Reported by Syn4pse on 2026-02-16
[TBD][485292589] High CVE-2026-4443: Heap buffer overflow in WebAudio.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][486349161] High CVE-2026-4444: Stack buffer overflow in WebRTC.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-21
[TBD][486421953] High CVE-2026-4445: Use after free in WebRTC.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486421954] High CVE-2026-4446: Use after free in WebRTC.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486657483] High CVE-2026-4447: Inappropriate implementation
in V8. Reported by Erge on 2026-02-23
[TBD][486972661] High CVE-2026-4448: Heap buffer overflow in ANGLE.
Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-02-23
[TBD][487117772] High CVE-2026-4449: Use after free in Blink.
Reported by Syn4pse on 2026-02-24
[TBD][487746373] High CVE-2026-4450: Out of bounds write in V8.
Reported by qymag1c on 2026-02-26
[TBD][487768779] High CVE-2026-4451: Insufficient validation of
untrusted input in Navigation.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-26
[TBD][487977696] High CVE-2026-4452: Integer overflow in ANGLE.
Reported by cinzinga on 2026-02-26
[TBD][488400770] High CVE-2026-4453: Integer overflow in Dawn.
Reported by sweetchip on 2026-02-27
[TBD][488585488] High CVE-2026-4454: Use after free in Network.
Reported by heapracer (@heapracer) on 2026-03-01
[TBD][488585504] High CVE-2026-4455: Heap buffer overflow in PDFium.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-01
[TBD][488617440] High CVE-2026-4456: Use after free in Digital
Credentials API. Reported by sean wong on 2026-02-28
[TBD][488803413] High CVE-2026-4457: Type Confusion in V8.
Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-03-01
[TBD][489619753] High CVE-2026-4458: Use after free in Extensions.
Reported by Shaheen Fazim on 2026-03-04
[TBD][490246422] High CVE-2026-4459: Out of bounds read and write
in WebAudio. Reported by Jihyeon Jeong (Compsec Lab, Seoul National
University / Research Intern) on 2026-03-06
[TBD][490254124] High CVE-2026-4460: Out of bounds read in Skia.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-06
[TBD][490558172] High CVE-2026-4461: Inappropriate implementation
in V8. Reported by Google on 2026-03-07
[TBD][491080830] High CVE-2026-4462: Out of bounds read in Blink.
Reported by heapracer (@heapracer) on 2026-03-09
[TBD][491358681] High CVE-2026-4463: Heap buffer overflow in WebRTC.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-10
[TBD][487208468] Medium CVE-2026-4464: Integer overflow in ANGLE.
Reported by heesun on 2026-02-24


To generate a diff of this commit:
cvs rdiff -u -r1.47 -r1.48 pkgsrc/www/chromium/Makefile
cvs rdiff -u -r1.33 -r1.34 pkgsrc/www/chromium/distinfo
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/www/chromium/patches/patch-chrome_browser_ui_views_frame_multi__contents__view__drop__target__controller.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/chromium/Makefile
diff -u pkgsrc/www/chromium/Makefile:1.47 pkgsrc/www/chromium/Makefile:1.48
--- pkgsrc/www/chromium/Makefile:1.47   Sat Mar 14 19:24:49 2026
+++ pkgsrc/www/chromium/Makefile        Sat Mar 21 16:28:15 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.47 2026/03/14 19:24:49 kikadf Exp $
+# $NetBSD: Makefile,v 1.48 2026/03/21 16:28:15 kikadf Exp $
 
 DISTNAME=                      chromium-${VERSION}
-VERSION=                       146.0.7680.80
+VERSION=                       146.0.7680.153
 CATEGORIES=                    www
 MASTER_SITES=                  https://commondatastorage.googleapis.com/chromium-browser-official/
 EXTRACT_SUFX_C=                        .tar.xz

Index: pkgsrc/www/chromium/distinfo
diff -u pkgsrc/www/chromium/distinfo:1.33 pkgsrc/www/chromium/distinfo:1.34
--- pkgsrc/www/chromium/distinfo:1.33   Sat Mar 14 19:24:49 2026
+++ pkgsrc/www/chromium/distinfo        Sat Mar 21 16:28:15 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.33 2026/03/14 19:24:49 kikadf Exp $
+$NetBSD: distinfo,v 1.34 2026/03/21 16:28:15 kikadf Exp $
 
 BLAKE2s (Inflector-0.11.4.crate) = 2f8b4a805230be3b58267c7fb6b9c26c2ec966378d195673d1128a851cca515d
 SHA512 (Inflector-0.11.4.crate) = f1f6463e033b6d3c16c51dc1e1a3f5569954308b95b59058294b7f9310919bbda797e99e6a07529071bb83f0688867a243997d33795a7136b0af73977004296e
@@ -51,12 +51,12 @@ Size (cc-1.1.21.crate) = 83463 bytes
 BLAKE2s (cfg-if-1.0.0.crate) = fbb02f63b24cc224b045ff2aac3aefd0a77cf7b578df4d5f9da9517a59aaf9bb
 SHA512 (cfg-if-1.0.0.crate) = 0fb16a8882fd30e86b62c5143b1cb18ab564e84e75bd1f28fd12f24ffdc4a42e0d2e012a99abb606c12efe3c11061ff5bf8e24ab053e550ae083f7d90f6576ff
 Size (cfg-if-1.0.0.crate) = 7934 bytes
-BLAKE2s (chromium-146.0.7680.80-lite.tar.xz) = 7ff6ddc31e8c4b40309c525d719e5ce10e4843d4dde1720bd2826ca28decea81
-SHA512 (chromium-146.0.7680.80-lite.tar.xz) = 86bf36d7ed607ce314d084aebce7e4713e7b39a3edda3c33b613651799abfe40fda67b665d4ec1fc53bc26654a0b731b2d3d1f898ab51cc1c8f6682b155efd12
-Size (chromium-146.0.7680.80-lite.tar.xz) = 1476612920 bytes
-BLAKE2s (chromium-146.0.7680.80-testdata.tar.xz) = 574053ec85c5ef77b613ced95eec3a22e65997be6e66e2d918acd521d4c2f690
-SHA512 (chromium-146.0.7680.80-testdata.tar.xz) = 7437561e6ce18808d0bb96384763e01e5e677a576eade5c14ddda37991cc9276939fe0a7275ed3625c10898efb90b4981f3b031e405bf10f0e1b239de829a20c
-Size (chromium-146.0.7680.80-testdata.tar.xz) = 1320139412 bytes
+BLAKE2s (chromium-146.0.7680.153-lite.tar.xz) = 4fc540a2ec0d36909e33552c1ae9c441bc248404d54271698aa5ab1c3d1d9ee3
+SHA512 (chromium-146.0.7680.153-lite.tar.xz) = 30692e93b70298144fe75fe38beda88dc7160fc4812f11fe58800dc601edc93407dc5140debae40aa686d35242fbcd443acdfa665f1bd1e5e656ec901fffafa5
+Size (chromium-146.0.7680.153-lite.tar.xz) = 1477731668 bytes
+BLAKE2s (chromium-146.0.7680.153-testdata.tar.xz) = f2e47ec422ad256bc00cd7440cd8c7ebea9774a7d1c2b1ef2714b5a2aa42803d
+SHA512 (chromium-146.0.7680.153-testdata.tar.xz) = a74c0dc42bbd89b71e8bc7772e949979d32b93bc39223f4a86a6e6dec30f824b5c121b0b1275a7d96fffa68463176540ab3c9a4ca3d648541795ccf83039d8e1
+Size (chromium-146.0.7680.153-testdata.tar.xz) = 1319900156 bytes
 BLAKE2s (convert_case-0.6.0.crate) = c65fc0970543af9611c565957751df80f31efa3aa7c4d8e5eac41712864a67d5
 SHA512 (convert_case-0.6.0.crate) = 3b17449195a9a36e3965db89eeb967979c192ad7743217ea08e8c8b91ecae1ac1674362d05dc6f32f1f361fface3f783398285bb78060403f65a777a9d29adf2
 Size (convert_case-0.6.0.crate) = 18675 bytes
@@ -932,7 +932,6 @@ SHA1 (patch-chrome_browser_ui_views_fram
 SHA1 (patch-chrome_browser_ui_views_frame_custom__corners__background.cc) = 302a2b92f697344269acc0b909ed1186021301f2
 SHA1 (patch-chrome_browser_ui_views_frame_layout_browser__view__app__layout__impl.cc) = d721ce6529cae7a507832e04a8a216407250922d
 SHA1 (patch-chrome_browser_ui_views_frame_multi__contents__view__drop__target__controller.cc) = a2157c147d417773eb839a1c9bd4d26880e701b1
-SHA1 (patch-chrome_browser_ui_views_frame_multi__contents__view__drop__target__controller.h) = f8e4fdee6da69ae70fae70bd7eb868c78eef5ac5
 SHA1 (patch-chrome_browser_ui_views_frame_opaque__browser__frame__view.cc) = df92b1cba8759dbd02a58aa8560c2a6695181087
 SHA1 (patch-chrome_browser_ui_views_frame_opaque__browser__frame__view.h) = d0bbdb533fcdb112de4cf37b5ca269a0ef12e929
 SHA1 (patch-chrome_browser_ui_views_frame_opaque__browser__frame__view__layout__delegate.h) = d7b392736a261e00c556d8e0e59755330e52fe4e