CVS commit: pkgsrc/www/chromium

["Robert Bagdan" <kikadf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   kikadf
Date:           Wed Nov 11 13:12:56 UTC 2026

Modified Files:
        pkgsrc/www/chromium: Makefile distinfo

Log Message:
chromium: update to 157.0.8103.50

* 157.0.8103.50
This update includes 9 security fixes. Please see the Chrome Security Page for more information.

[N/A][550525698] High CVE-2026-125345: Uninitialized resource in WebGL. Reported by Google on 2026-08-21
[N/A][561996724] High CVE-2026-125347: Incorrect authorization in FileSystem. Reported by Google on 2026-09-15
[N/A][561998123] High CVE-2026-125343: Buffer overflow in Compositing. Reported by Google on 2026-09-15
[N/A][563358700] High CVE-2026-125348: Out of bounds write in GPU. Reported by Google on 2026-09-18
[N/A][568893995] High CVE-2026-125344: Type confusion in V8. Reported by Google on 2026-10-02
[TBD][572578603] High CVE-2026-125346: Use after free in XML. Reported by Arni Hardarson (Neonix Security) on 2026-10-12
[N/A][582442907] High CVE-2026-125350: Use after free in XML. Reported by anonymous on 2026-11-06
[N/A][536663516] Medium CVE-2026-125349: Uninitialized resource in GPU. Reported by Google on 2026-07-20
[TBD][566384898] Medium CVE-2026-125342: Uninitialized resource in GPU. Reported by Vo Duc Thang (ugvxb) on 2026-09-26

Google is aware that an exploit for CVE-2026-125350 exists in the wild.


To generate a diff of this commit:
cvs rdiff -u -r1.102 -r1.103 pkgsrc/www/chromium/Makefile
cvs rdiff -u -r1.70 -r1.71 pkgsrc/www/chromium/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/chromium/Makefile
diff -u pkgsrc/www/chromium/Makefile:1.102 pkgsrc/www/chromium/Makefile:1.103
--- pkgsrc/www/chromium/Makefile:1.102  Wed Nov 11 11:56:13 2026
+++ pkgsrc/www/chromium/Makefile        Wed Nov 11 13:12:55 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.102 2026/11/11 11:56:13 wiz Exp $
+# $NetBSD: Makefile,v 1.103 2026/11/11 13:12:55 kikadf Exp $
 
 DISTNAME=                      chromium-${VERSION}
-VERSION=                       157.0.8103.38
-PKGREVISION=                   2
+VERSION=                       157.0.8103.50
 CATEGORIES=                    www
 MASTER_SITES=                  https://commondatastorage.googleapis.com/chromium-browser-official/
 #MASTER_SITES=                 ${MASTER_SITE_GITHUB:=chromium-linux-tarballs/}chromium-tarballs/releases/download/${VERSION}/

Index: pkgsrc/www/chromium/distinfo
diff -u pkgsrc/www/chromium/distinfo:1.70 pkgsrc/www/chromium/distinfo:1.71
--- pkgsrc/www/chromium/distinfo:1.70   Sun Nov  8 15:38:50 2026
+++ pkgsrc/www/chromium/distinfo        Wed Nov 11 13:12:56 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.70 2026/11/08 15:38:50 kikadf Exp $
+$NetBSD: distinfo,v 1.71 2026/11/11 13:12:56 kikadf Exp $
 
 BLAKE2s (aho-corasick-1.1.5.crate) = 81b34e3dfc1b58f892b0487465608067b30309e424c9904a98e8f926a6adc083
 SHA512 (aho-corasick-1.1.5.crate) = 324012ebcb573740ce56c7ef217dcf2bb849d0040e022dcc39aa8a46750088a2c26271016bfb6b1bf7a558d0c4bcefc004811bd8f0afd7fd000dce9bf0206643
@@ -45,9 +45,9 @@ Size (cc-1.4.4.crate) = 100602 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes
-BLAKE2s (chromium-157.0.8103.38-lite.tar.xz) = eb4193a001d81468649025f30353900b0f4bf910dd51b591aeef202dfa0c8dc5
-SHA512 (chromium-157.0.8103.38-lite.tar.xz) = 529a9f0f320612bbc5d2dd828be26f8f64dc7af351f9a62d702a1232d182a0a0c2fd6a45654d37c379132d99d7b422bd71a1822a3bd1d21164252ad1df19a76a
-Size (chromium-157.0.8103.38-lite.tar.xz) = 2079538400 bytes
+BLAKE2s (chromium-157.0.8103.50-lite.tar.xz) = 843d0ab8dd6b9ec84168e0d49444e8fe2a42b9af70de7809f9642543e48f881f
+SHA512 (chromium-157.0.8103.50-lite.tar.xz) = 971799b2b1ac275e0be76af8b1b92b2ab89696d6bc6b843e2ad12a9bf6113dd32923ef2468ff34d207538b067cbd7576f6c8e533410f59ccf762043e960b10e1
+Size (chromium-157.0.8103.50-lite.tar.xz) = 2079759852 bytes
 BLAKE2s (clap-4.6.7.crate) = d90b5912c2135cf46b5eed64f24f3e12fd086035d7813792589623e22957b573
 SHA512 (clap-4.6.7.crate) = 461ba233b8d6fcbba51b74a3954bd0c83cf4a29809f8cf73a56927a04b63e973506d42eab19db83ac2ecc4a381c265569665a7d8b81dd6753ecaa544095e6f2f
 Size (clap-4.6.7.crate) = 65831 bytes