CVS commit: pkgsrc/www/chromium

["Robert Bagdan" <kikadf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kikadf
Date:           Thu Apr  2 13:25:30 UTC 2026

Modified Files:
        pkgsrc/www/chromium: Makefile distinfo

Log Message:
www/chromium: update to 146.0.7680.177

* 146.0.7680.177
This update includes 21 security fixes. Please see the
Chrome Security Page for more information.
[TBD][493952652] High CVE-2026-5273: Use after free in CSS.
Reported by Anonymous on 2026-03-18
[TBD][491732188] High CVE-2026-5272: Heap buffer overflow in GPU.
Reported by inspector-ambitious on 2026-03-11
[TBD][488596746] High CVE-2026-5274: Integer overflow in Codecs.
Reported by heapracer (@heapracer) on 2026-03-01
[TBD][489494022] High CVE-2026-5275: Heap buffer overflow in ANGLE.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-04
[TBD][489711638] High CVE-2026-5276: Insufficient policy enforcement
in WebUSB. Reported by Ariel Simon on 2026-03-04
[TBD][489791424] High CVE-2026-5277: Integer overflow in ANGLE.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-05
[TBD][490254128] High CVE-2026-5278: Use after free in Web MIDI.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-06
[TBD][490642836] High CVE-2026-5279: Object corruption in V8.
Reported by Hyeonjun Ahn (@_deayzl) on 2026-03-08
[TBD][491515787] High CVE-2026-5280: Use after free in WebCodecs.
Reported by heapracer (@heapracer) on 2026-03-11
[TBD][491518608] High CVE-2026-5281: Use after free in Dawn.
Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-10
[TBD][491655161] High CVE-2026-5282: Out of bounds read in WebCodecs.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-11
[TBD][492131521] High CVE-2026-5283: Inappropriate implementation
in ANGLE. Reported by sweetchip on 2026-03-12
[TBD][492139412] High CVE-2026-5284: Use after free in Dawn.
Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-12
[TBD][492228019] High CVE-2026-5285: Use after free in WebGL.
Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-13
[TBD][493900619] High CVE-2026-5286: Use after free in Dawn.
Reported by sweetchip on 2026-03-18
[TBD][494644471] High CVE-2026-5287: Use after free in PDF.
Reported by Syn4pse on 2026-03-21
[NA][495507390] High CVE-2026-5288: Use after free in WebView.
Reported by Google on 2026-03-23
[NA][495931147] High CVE-2026-5289: Use after free in Navigation.
Reported by Google on 2026-03-25
[NA][496205576] High CVE-2026-5290: Use after free in Compositing.
Reported by Google on 2026-03-25
[TBD][490118036] Medium CVE-2026-5291: Inappropriate implementation
in WebGL. Reported by heapracer (@heapracer) on 2026-03-06
[NA][492213293] Medium CVE-2026-5292: Out of bounds read in WebCodecs.
Reported by Google on 2026-03-12

Google is aware that an exploit for CVE-2026-5281 exists in the wild.


To generate a diff of this commit:
cvs rdiff -u -r1.50 -r1.51 pkgsrc/www/chromium/Makefile
cvs rdiff -u -r1.36 -r1.37 pkgsrc/www/chromium/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/chromium/Makefile
diff -u pkgsrc/www/chromium/Makefile:1.50 pkgsrc/www/chromium/Makefile:1.51
--- pkgsrc/www/chromium/Makefile:1.50   Sun Mar 29 16:43:50 2026
+++ pkgsrc/www/chromium/Makefile        Thu Apr  2 13:25:29 2026
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.50 2026/03/29 16:43:50 tnn Exp $
+# $NetBSD: Makefile,v 1.51 2026/04/02 13:25:29 kikadf Exp $
 
 DISTNAME=                      chromium-${VERSION}
-VERSION=                       146.0.7680.164
+VERSION=                       146.0.7680.177
 CATEGORIES=                    www
 MASTER_SITES=                  https://commondatastorage.googleapis.com/chromium-browser-official/
 EXTRACT_SUFX_C=                        .tar.xz
@@ -22,7 +22,7 @@ EB_DISTNAME=                  ${MAKE} -C ../../www/esbu
 GITHUB_SUBMODULES+=            evanw esbuild v${EB_DISTNAME:sh:C/^.*-//} esbuild
 
 # LLVM_MAJOR_VERSION
-LLVM_MV=                       19
+LLVM_MV=                       20
 
 MAINTAINER=                    kikadf%NetBSD.org@localhost
 HOMEPAGE=                      https://www.chromium.org/Home
@@ -33,6 +33,7 @@ USE_TOOLS+=                   bash bison flex:pkgsrc gma
 TOOLS_PLATFORM.flex=           # override the platform definition to use pkgsrc's flex.
 USE_LANGUAGES=                 c c++
 
+
 CHECK_PORTABILITY_SKIP+=       docs/website/site/for-testers/bug-reporting-guidelines/hanging-tabs/crash-with-gdb
 CHECK_PORTABILITY_SKIP+=       remoting/host/installer/mac/Scripts/remoting_preflight.sh
 CHECK_PORTABILITY_SKIP+=       remoting/host/installer/mac/Scripts/remoting_postflight.sh

Index: pkgsrc/www/chromium/distinfo
diff -u pkgsrc/www/chromium/distinfo:1.36 pkgsrc/www/chromium/distinfo:1.37
--- pkgsrc/www/chromium/distinfo:1.36   Sun Mar 29 19:18:49 2026
+++ pkgsrc/www/chromium/distinfo        Thu Apr  2 13:25:29 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.36 2026/03/29 19:18:49 tnn Exp $
+$NetBSD: distinfo,v 1.37 2026/04/02 13:25:29 kikadf Exp $
 
 BLAKE2s (Inflector-0.11.4.crate) = 2f8b4a805230be3b58267c7fb6b9c26c2ec966378d195673d1128a851cca515d
 SHA512 (Inflector-0.11.4.crate) = f1f6463e033b6d3c16c51dc1e1a3f5569954308b95b59058294b7f9310919bbda797e99e6a07529071bb83f0688867a243997d33795a7136b0af73977004296e
@@ -51,12 +51,12 @@ Size (cc-1.1.21.crate) = 83463 bytes
 BLAKE2s (cfg-if-1.0.0.crate) = fbb02f63b24cc224b045ff2aac3aefd0a77cf7b578df4d5f9da9517a59aaf9bb
 SHA512 (cfg-if-1.0.0.crate) = 0fb16a8882fd30e86b62c5143b1cb18ab564e84e75bd1f28fd12f24ffdc4a42e0d2e012a99abb606c12efe3c11061ff5bf8e24ab053e550ae083f7d90f6576ff
 Size (cfg-if-1.0.0.crate) = 7934 bytes
-BLAKE2s (chromium-146.0.7680.164-lite.tar.xz) = 6968cb72fc1be1670046da29f8f6f4ae48369c3be841ceac12ff91a6e3d97cb3
-SHA512 (chromium-146.0.7680.164-lite.tar.xz) = edb557be9e7c771a01e61f57fec8d7962fadfd02eda95afbde76cad1eafecd67eee80bfee337809458c5b4ac6397ef5ccc34fb110e31c45df11a219357b97d17
-Size (chromium-146.0.7680.164-lite.tar.xz) = 1476795816 bytes
-BLAKE2s (chromium-146.0.7680.164-testdata.tar.xz) = 2d865c8533a94450df0a6af92dd2080f0da40d0c731aa57d7598bcedf71f1a0c
-SHA512 (chromium-146.0.7680.164-testdata.tar.xz) = c2e039e34a90c552460fc9b3bb96d6ef2ab142c55cc122579c82514865a3c88c98f2f1c1b64bf8e4e72a03ba8a4bfd9be40000b532e733fdc3ed544c9ae2dd4b
-Size (chromium-146.0.7680.164-testdata.tar.xz) = 1319956124 bytes
+BLAKE2s (chromium-146.0.7680.177-lite.tar.xz) = 8ad8588c0c17fa371dc4ca14655683c8db057407da132055560c5dde26eaef68
+SHA512 (chromium-146.0.7680.177-lite.tar.xz) = 5868e69d3d78f1ce40f908965d3a42a8d4862ddffdb4d5b8e5fa39dcaf83f9bb580e836b4c910e246f587371ced740eb32e615621adcdcbee88e7aa1db6b4802
+Size (chromium-146.0.7680.177-lite.tar.xz) = 1477102388 bytes
+BLAKE2s (chromium-146.0.7680.177-testdata.tar.xz) = 73c026a8ab3d1953407e128becab31abef43dc75a52c14d012ed65394f35a293
+SHA512 (chromium-146.0.7680.177-testdata.tar.xz) = d827fa4ff7540bf03137f282ff7ecf39ecb801d8ceca14567d0fa45394d632f9970d7ccaed029437446e8f480787d9dc0fd50b416100f782ef14767e0602ce58
+Size (chromium-146.0.7680.177-testdata.tar.xz) = 1320109536 bytes
 BLAKE2s (convert_case-0.6.0.crate) = c65fc0970543af9611c565957751df80f31efa3aa7c4d8e5eac41712864a67d5
 SHA512 (convert_case-0.6.0.crate) = 3b17449195a9a36e3965db89eeb967979c192ad7743217ea08e8c8b91ecae1ac1674362d05dc6f32f1f361fface3f783398285bb78060403f65a777a9d29adf2
 Size (convert_case-0.6.0.crate) = 18675 bytes
@@ -81,9 +81,9 @@ Size (either-1.13.0.crate) = 19169 bytes
 BLAKE2s (equivalent-1.0.1.crate) = 915ff7ece3e11b5de2f2f26d2da9c4dfa1c7484416c53025c08507677cebebbd
 SHA512 (equivalent-1.0.1.crate) = b2bc60e804c1b02c461dcefcfd60fc37145af710d183ebe65f9a4d63f2b2072d23193f98dc550a9213c7fdc6a2a837af23b04a89294ebbb681a4aaf5d5031140
 Size (equivalent-1.0.1.crate) = 6615 bytes
-BLAKE2s (evanw-esbuild-v0.27.3.tar.gz) = 798d1a1f3574c92b47c6588b9ed436dbb74fc77f1eb065b2fcb0bfb5396b87ca
-SHA512 (evanw-esbuild-v0.27.3.tar.gz) = 169861c528ffb4943b8c7074017e1b65d97c3b598eb7be355e9842ce40ea75393e6ecc40a29e6a9d865175b354a5c74e18f3b024c480a3a09446a66db4ee02a4
-Size (evanw-esbuild-v0.27.3.tar.gz) = 1983973 bytes
+BLAKE2s (evanw-esbuild-v0.27.5.tar.gz) = 8bf45743ce0631bd6936e295f2c766be143fbf4b20689cdcf89bd34117b3cca3
+SHA512 (evanw-esbuild-v0.27.5.tar.gz) = 5e71a7976067526883607e509cde9418e13065f18a41e01dbfc1f6b92a7e19c2ffc690b5fe88b4a864f65967f957df27b2d185223752eb3d0f8e988577139e02
+Size (evanw-esbuild-v0.27.5.tar.gz) = 1990125 bytes
 BLAKE2s (fixedbitset-0.4.2.crate) = 4b9d305e9a18e8ccdf747fa067106c885d45e3856780140107551f9aaee4812c
 SHA512 (fixedbitset-0.4.2.crate) = 57c5d756b0a202b2506270f0d5e890f7617a1e0c015b6059ea23fab49cf7af47fd06927eb56feb03b37cb2b6c467e326b3f0da1e32cfcb6339cf11a130a3ccab
 Size (fixedbitset-0.4.2.crate) = 15954 bytes