chromium: update to 154.0.8037.97

To: pkgsrc-wip-changes%NetBSD.org@localhost
Subject: chromium: update to 154.0.8037.97
From: kikadf (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>
Date: Fri, 2 Oct 2026 11:19:09 +0000
Module Name:	pkgsrc-wip
Committed By:	kikadf <kikadf.01%gmail.com@localhost>
Pushed By:	kikadf
Date:		Fri Oct 2 13:10:08 2026 +0200
Changeset:	45d5551d9b32b3e33995d1cddda11e07b8eb7905

Modified Files:
	chromium/COMMIT_MSG
	chromium/Makefile
	chromium/distinfo
	chromium/patches/patch-third__party_test__fonts_fontconfig_BUILD.gn
Removed Files:
	chromium/patches/patch-third__party_test__fonts_fontconfig_generate__fontconfig__caches.cc

Log Message:
chromium: update to 154.0.8037.97

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=45d5551d9b32b3e33995d1cddda11e07b8eb7905

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 chromium/COMMIT_MSG                                | 42 +++++++++++++++++++---
 chromium/Makefile                                  |  2 +-
 chromium/distinfo                                  |  9 +++--
 ...ch-third__party_test__fonts_fontconfig_BUILD.gn |  2 +-
 ...onts_fontconfig_generate__fontconfig__caches.cc | 26 --------------
 5 files changed, 44 insertions(+), 37 deletions(-)

diffs:
diff --git a/chromium/COMMIT_MSG b/chromium/COMMIT_MSG
index ac9bb13d7f..d8f3ade007 100644
--- a/chromium/COMMIT_MSG
+++ b/chromium/COMMIT_MSG
@@ -1,7 +1,41 @@
-chromium: update to 154.0.8037.57
+chromium: update to 154.0.8037.97
 
-* 154.0.8037.57
-This update includes 108 security fixes. Please see the Chrome Security Page for more information.
+* 154.0.8037.92
+This update includes 32 security fixes. Please see the Chrome Security Page for more information.
 
-See: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
+[TBD][551673541] Critical CVE-2026-102331: Buffer overflow in ANGLE. Reported by @mfx on 2026-08-24
+[N/A][517312707] High CVE-2026-102317: Improper privilege management in Mojo. Reported by Google on 2026-05-28
+[TBD][551668264] High CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga on 2026-08-24
+[N/A][556789073] High CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google on 2026-09-03
+[TBD][556908674] High CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni on 2026-09-04
+[N/A][556926296] High CVE-2026-102306: Use after free in Bluetooth. Reported by Google on 2026-09-04
+[N/A][556959073] High CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google on 2026-09-04
+[TBD][559266114] High CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10
+[N/A][559727039] High CVE-2026-102303: Uninitialized resource in GPU. Reported by Google on 2026-09-10
+[N/A][559737160] High CVE-2026-102311: Uninitialized resource in GPU. Reported by Google on 2026-09-10
+[TBD][560062638] High CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security) on 2026-09-11
+[TBD][560233248] High CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-11
+[TBD][560238698] High CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge on 2026-09-11
+[TBD][560251736] High CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-11
+[TBD][560536732] High CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-12
+[TBD][560867085] High CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey on 2026-09-13
+[N/A][561994362] High CVE-2026-102325: Uninitialized resource in Skia. Reported by Google on 2026-09-15
+[N/A][561997480] High CVE-2026-102308: Use after free in Views. Reported by Google on 2026-09-15
+[N/A][562004351] High CVE-2026-102301: Out of bounds write in GPU. Reported by Google on 2026-09-15
+[N/A][562042411] High CVE-2026-102319: Uninitialized resource in GPU. Reported by Google on 2026-09-15
+[TBD][562174487] High CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt on 2026-09-15
+[N/A][562279351] High CVE-2026-102318: Out of bounds read in WebGL. Reported by Google on 2026-09-16
+[TBD][563297615] High CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec on 2026-09-18
+[N/A][563351482] High CVE-2026-102315: Uninitialized resource in Media. Reported by Google on 2026-09-18
+[N/A][563716534] High CVE-2026-102302: Buffer overflow in V8. Reported by Google on 2026-09-19
+[TBD][565328105] High CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@taisic_) of Theori, with Xint on 2026-09-23
+[TBD][554038924] Medium CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous on 2026-08-28
+[$1,000][477726837] Low CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact on 2026-01-22
+[N/A][496212975] Low CVE-2026-102327: Incorrect authorization in WebView. Reported by Google on 2026-03-25
+[N/A][498793976] Low CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google on 2026-04-02
+[N/A][514059780] Low CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google on 2026-05-17
+[N/A][533021953] Low CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google on 2026-07-09
 
+* 154.0.8037.97
+
+See: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
diff --git a/chromium/Makefile b/chromium/Makefile
index b588ebd341..f8720ba87c 100644
--- a/chromium/Makefile
+++ b/chromium/Makefile
@@ -1,7 +1,7 @@
 # $NetBSD: Makefile,v 1.80 2026/09/05 19:10:04 bsiegert Exp $
 
 DISTNAME=			chromium-${VERSION}
-VERSION=			154.0.8037.57
+VERSION=			154.0.8037.97
 CATEGORIES=			www
 #MASTER_SITES=			https://commondatastorage.googleapis.com/chromium-browser-official/
 MASTER_SITES=			${MASTER_SITE_GITHUB:=chromium-linux-tarballs/}chromium-tarballs/releases/download/${VERSION}/
diff --git a/chromium/distinfo b/chromium/distinfo
index 35d5a06397..949000f03f 100644
--- a/chromium/distinfo
+++ b/chromium/distinfo
@@ -66,9 +66,9 @@ Size (cc-1.2.61.crate) = 97163 bytes
 BLAKE2s (cfg-if-1.0.4.crate) = 517b7cff4f133f9b02492c0db281822fd02c24941a7aa4f9b1502895dc5e58d9
 SHA512 (cfg-if-1.0.4.crate) = 176e04df7ba783b7143bb84397b777f5c5a1305c08a5c3a218d4a66830620be89ed68992ba27686165bcd3fb2f34b2daf80b2a1d4b481ecc267c988e84d28e9d
 Size (cfg-if-1.0.4.crate) = 9360 bytes
-BLAKE2s (chromium-154.0.8037.57-linux.tar.xz) = 711f5ded3609ac014db482df37f76749ba03019c88d929826ed7dca40b9574c2
-SHA512 (chromium-154.0.8037.57-linux.tar.xz) = 7c9e7bb2cf5072bf2dada3c42a2b6aabfec8360bfff546dd13fb3223e2d58d55b688d7bdda8603521615a4f3ed0c3cb973996bbbd4e9c6a59f2488d05c1e3aa5
-Size (chromium-154.0.8037.57-linux.tar.xz) = 1929858224 bytes
+BLAKE2s (chromium-154.0.8037.97-linux.tar.xz) = 30ef5fd345d71e092fd45e29835cbe196994edbb4dcf9843cf137d14186d76b0
+SHA512 (chromium-154.0.8037.97-linux.tar.xz) = a2d441e02e31629b70d8cb2c6e4cb6bae9fbcaf19483469c7e320d6fdfb5e3da57e7dbee396cf0bf5b36db78d422b0ac019d4570cd39050d4d68d7c584786f83
+Size (chromium-154.0.8037.97-linux.tar.xz) = 1929902700 bytes
 BLAKE2s (cmake-0.1.58.crate) = a4568b73f30075a127114fb24a891b182573483d81080643888ecbd5e954efe7
 SHA512 (cmake-0.1.58.crate) = 49420a5d7d71ddccc21b71373769e1e28ab98c9af1a0c5d59fc3127e6dcc45cb1b7c6b5a37c9110907daceda7fd10bb59344f2bb8f041b18d62b16c22c5d0d60
 Size (cmake-0.1.58.crate) = 20474 bytes
@@ -2189,9 +2189,8 @@ SHA1 (patch-third__party_swiftshader_third__party_llvm-10.0_configs_linux_includ
 SHA1 (patch-third__party_swiftshader_third__party_llvm-subzero_build_Linux_include_llvm_Config_config.h) = 9bc97a5e1f57b61e44de42f0af66d1a46ffffd65
 SHA1 (patch-third__party_swiftshader_third__party_marl_src_memory.cpp) = 1038d7d0774c8076fbf80bc30c0e6b315d5725f7
 SHA1 (patch-third__party_swiftshader_third__party_marl_src_thread.cpp) = 6cfa8abaa751363584357a0386b643bce8d6a48e
-SHA1 (patch-third__party_test__fonts_fontconfig_BUILD.gn) = 2739b57d2011af4f1f80aef3e744a0fa6532e3a9
+SHA1 (patch-third__party_test__fonts_fontconfig_BUILD.gn) = a0f22698f6e9d1119b60f5144a0def2428e515ea
 SHA1 (patch-third__party_test__fonts_fontconfig_fontconfig__util__linux.cc) = 0f39302551c2b79f78c0ce81d9891a55387c0c4f
-SHA1 (patch-third__party_test__fonts_fontconfig_generate__fontconfig__caches.cc) = 2508049423d4151f98839ad47fe36b29bc1419a3
 SHA1 (patch-third__party_tflite_features.gni) = c9f0cc7bff1d340cb6d34a5ccdf9ea37ddbcf622
 SHA1 (patch-third__party_typescript_tsgo.gni) = eb2197b148344220f3171310a38c103c0c4d057c
 SHA1 (patch-third__party_typescript_typescript.py) = b9a164e03a9dfab3358d8f7a0840fc4d64e1ce7e
diff --git a/chromium/patches/patch-third__party_test__fonts_fontconfig_BUILD.gn b/chromium/patches/patch-third__party_test__fonts_fontconfig_BUILD.gn
index edff36f4db..707cccc530 100644
--- a/chromium/patches/patch-third__party_test__fonts_fontconfig_BUILD.gn
+++ b/chromium/patches/patch-third__party_test__fonts_fontconfig_BUILD.gn
@@ -22,7 +22,7 @@ $NetBSD$
 -      inputs = [ "$root_out_dir/etc/fonts/fonts.conf" ]
 +      inputs = [ "$root_out_dir@PKG_SYSCONFBASE@/fontconfig/fonts.conf" ]
        outputs = [
--        "$root_out_dir/fontconfig_caches/fb5c91b2895aa445d23aebf7f9e2189c-le64.cache-11",
+-        "$root_out_dir/fontconfig_caches/fb5c91b2895aa445d23aebf7f9e2189c-le64.cache-12",
 +        "$root_out_dir/fontconfig_caches/fb5c91b2895aa445d23aebf7f9e2189c-le64.cache-9",
          "$root_out_dir/fontconfig_caches/CACHEDIR.TAG",
        ]
diff --git a/chromium/patches/patch-third__party_test__fonts_fontconfig_generate__fontconfig__caches.cc b/chromium/patches/patch-third__party_test__fonts_fontconfig_generate__fontconfig__caches.cc
deleted file mode 100644
index c2e5c0263a..0000000000
--- a/chromium/patches/patch-third__party_test__fonts_fontconfig_generate__fontconfig__caches.cc
+++ /dev/null
@@ -1,26 +0,0 @@
-$NetBSD$
-
-* Part of patchset to build chromium on NetBSD
-* Based on OpenBSD's chromium patches, and
-  pkgsrc's qt5-qtwebengine patches
-
---- third_party/test_fonts/fontconfig/generate_fontconfig_caches.cc.orig	2026-09-22 00:09:16.000000000 +0000
-+++ third_party/test_fonts/fontconfig/generate_fontconfig_caches.cc
-@@ -28,6 +28,7 @@ int main() {
-   // fontconfig cache.
-   //     $ echo -n /test_fonts | md5sum
-   //     fb5c91b2895aa445d23aebf7f9e2189c  -
-+  //static const char kCacheKey[] = "cd4b5bc7-6cfc-41dc-8982-f2db624179ba";
-   static const char kCacheKey[] = "fb5c91b2895aa445d23aebf7f9e2189c";
- 
-   // fontconfig writes the mtime of the test_fonts directory into the cache. It
-@@ -56,7 +57,8 @@ int main() {
-   FcFini();
- 
-   // Check existence of intended fontconfig cache file.
--  auto cache = fontconfig_caches + "/" + kCacheKey + "-le64.cache-11";
-+  //auto cache = fontconfig_caches + "/" + kCacheKey + "-x86_64.cache-" + FC_CACHE_VERSION;
-+  auto cache = fontconfig_caches + "/" + kCacheKey + "-le64.cache-" + FC_CACHE_VERSION;
-   bool cache_exists = access(cache.c_str(), F_OK) == 0;
-   return !cache_exists;
- }
Prev by Date: rust-beta: update to 1.100.0beta.2
Next by Date: chromium: fix SIGABRT on imgur.com
Previous by Thread: rust-beta: update to 1.100.0beta.2
Next by Thread: chromium: fix SIGABRT on imgur.com
Indexes:
Home | Main Index | Thread Index | Old Index