head	1.11;
access;
symbols
	pkgsrc-2025Q3:1.5.0.2
	pkgsrc-2025Q3-base:1.5;
locks; strict;
comment	@// @;


1.11
date	2026.10.13.13.16.29;	author kikadf;	state Exp;
branches;
next	1.10;
commitid	SwaVzhjttul8MjZG;

1.10
date	2026.10.02.11.43.19;	author kikadf;	state Exp;
branches;
next	1.9;
commitid	H2vrlX55cZdkCTXG;

1.9
date	2026.09.29.07.42.45;	author kikadf;	state Exp;
branches;
next	1.8;
commitid	hkmJ6D1WIKxgnuXG;

1.8
date	2026.09.22.13.41.17;	author kikadf;	state Exp;
branches;
next	1.7;
commitid	NyittFkZkmblACWG;

1.7
date	2025.11.04.14.55.28;	author kikadf;	state dead;
branches;
next	1.6;
commitid	qfucP2L8NrpolfhG;

1.6
date	2025.10.16.19.43.18;	author kikadf;	state Exp;
branches;
next	1.5;
commitid	pJyaYsgZ3njIxPeG;

1.5
date	2025.09.12.16.02.18;	author kikadf;	state Exp;
branches;
next	1.4;
commitid	3rRZ00vWaq6gqraG;

1.4
date	2025.09.08.13.24.15;	author kikadf;	state Exp;
branches;
next	1.3;
commitid	YOuCjxCDl8AYFU9G;

1.3
date	2025.08.13.07.44.14;	author kikadf;	state Exp;
branches;
next	1.2;
commitid	e9vibk03ttN7Dx6G;

1.2
date	2025.07.25.16.17.08;	author kikadf;	state Exp;
branches;
next	1.1;
commitid	hYvYS1Q7wSs6594G;

1.1
date	2025.07.07.09.23.23;	author kikadf;	state Exp;
branches;
next	;
commitid	rbhlGn8onQ00nN1G;


desc
@@


1.11
log
@
chromium: update to 155.0.8059.39

* 155.0.8059.39
This update includes 247 security fixes. Please see the Chrome Security Page for more information.

See: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
@
text
@$NetBSD$

* Part of patchset to build chromium on NetBSD
* Based on OpenBSD's chromium patches, and
  pkgsrc's qt5-qtwebengine patches

--- base/allocator/partition_alloc_features.cc.orig	2026-10-06 00:06:58.000000000 +0000
+++ base/allocator/partition_alloc_features.cc
@@@@ -132,7 +132,7 @@@@ constinit const FeatureParam<std::string
     kPartitionAllocSchedulerLoopQuarantineConfig{
         &kPartitionAllocSchedulerLoopQuarantine,
         "PartitionAllocSchedulerLoopQuarantineConfig",
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_WIN)
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_MAC) || BUILDFLAG(IS_WIN) || BUILDFLAG(IS_BSD)
         R"({
           "browser":{
             "main":{
@


1.10
log
@chromium: update to 154.0.8037.97

* 154.0.8037.92
This update includes 32 security fixes. Please see the Chrome Security Page for more information.

[TBD][551673541] Critical CVE-2026-102331: Buffer overflow in ANGLE. Reported by @@mfx on 2026-08-24
[N/A][517312707] High CVE-2026-102317: Improper privilege management in Mojo. Reported by Google on 2026-05-28
[TBD][551668264] High CVE-2026-102312: UI misrepresentation in Omnibox. Reported by jodyritonga on 2026-08-24
[N/A][556789073] High CVE-2026-102313: Uninitialized resource in ANGLE. Reported by Google on 2026-09-03
[TBD][556908674] High CVE-2026-102299: Type confusion in V8. Reported by Andrew Boni on 2026-09-04
[N/A][556926296] High CVE-2026-102306: Use after free in Bluetooth. Reported by Google on 2026-09-04
[N/A][556959073] High CVE-2026-102307: Uninitialized resource in Dawn. Reported by Google on 2026-09-04
[TBD][559266114] High CVE-2026-102323: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-10
[N/A][559727039] High CVE-2026-102303: Uninitialized resource in GPU. Reported by Google on 2026-09-10
[N/A][559737160] High CVE-2026-102311: Uninitialized resource in GPU. Reported by Google on 2026-09-10
[TBD][560062638] High CVE-2026-102300: Uninitialized resource in WebGPU. Reported by Arni Hardarson (Neonix Security) on 2026-09-11
[TBD][560233248] High CVE-2026-102326: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-11
[TBD][560238698] High CVE-2026-102316: Use after free in Views. Reported by Xinyang Ge on 2026-09-11
[TBD][560251736] High CVE-2026-102304: Use after free in Passwords. Reported by Xinyang Ge on 2026-09-11
[TBD][560536732] High CVE-2026-102328: Type confusion in V8. Reported by OpenAI Codex Security (amyb) on 2026-09-12
[TBD][560867085] High CVE-2026-102309: Use after free in FullScreen. Reported by sean geofrey on 2026-09-13
[N/A][561994362] High CVE-2026-102325: Uninitialized resource in Skia. Reported by Google on 2026-09-15
[N/A][561997480] High CVE-2026-102308: Use after free in Views. Reported by Google on 2026-09-15
[N/A][562004351] High CVE-2026-102301: Out of bounds write in GPU. Reported by Google on 2026-09-15
[N/A][562042411] High CVE-2026-102319: Uninitialized resource in GPU. Reported by Google on 2026-09-15
[TBD][562174487] High CVE-2026-102324: Use after free in PictureInPicture. Reported by Blockian Creator of Kritt and Open-Kritt on 2026-09-15
[N/A][562279351] High CVE-2026-102318: Out of bounds read in WebGL. Reported by Google on 2026-09-16
[TBD][563297615] High CVE-2026-102329: Cross-site scripting in WebUI. Reported by chipsec on 2026-09-18
[N/A][563351482] High CVE-2026-102315: Uninitialized resource in Media. Reported by Google on 2026-09-18
[N/A][563716534] High CVE-2026-102302: Buffer overflow in V8. Reported by Google on 2026-09-19
[TBD][565328105] High CVE-2026-102321: Type confusion in V8. Reported by Taisic Yun (@@taisic_) of Theori, with Xint on 2026-09-23
[TBD][554038924] Medium CVE-2026-102320: Missing authorization in CORS. Reported by Anonymous on 2026-08-28
[$1,000][477726837] Low CVE-2026-102310: Missing authorization in Payments. Reported by Autodidact on 2026-01-22
[N/A][496212975] Low CVE-2026-102327: Incorrect authorization in WebView. Reported by Google on 2026-03-25
[N/A][498793976] Low CVE-2026-102330: Incorrect authorization in SiteIsolation. Reported by Google on 2026-04-02
[N/A][514059780] Low CVE-2026-102314: UI misrepresentation in TabStrip. Reported by Google on 2026-05-17
[N/A][533021953] Low CVE-2026-102305: UI misrepresentation in SignIn. Reported by Google on 2026-07-09

* 154.0.8037.97

See: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2026-09-22 00:09:16.000000000 +0000
@


1.9
log
@
chromium: update to 154.0.8037.57

* 154.0.8037.57
This update includes 108 security fixes. Please see the Chrome Security Page for more information.

See: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
@
text
@@


1.8
log
@
chromium: update to 153.0.8010.52

* 153.0.8010.36
This update includes 230 security fixes. Please see the Chrome Security Page for more information.

See: https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

Google is aware that an exploit for CVE-2026-87491 exists in the wild:
[$2,500][543557673] Medium CVE-2026-87491: Out of bounds write in V8.
Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-08-06

* 153.0.8010.47
This update includes 42 security fixes. Please see the Chrome Security Page for more information.

[N/A][556870863] Critical CVE-2026-91726: Out of bounds read in WebGL. Reported by Google on 2026-09-03
[TBD][557320614] Critical CVE-2026-91721: Use after free in Internals. Reported by xinyang on 2026-09-04
[TBD][558456602] Critical CVE-2026-91749: Use after free in Workers. Reported by WinD39 - Huynh Dinh Vu on 2026-09-08
[$1,500][552283275] High CVE-2026-91724: Use after free in Input. Reported by Hafiizh on 2026-08-25
[$1,000][556715288] High CVE-2026-91728: Integer overflow in V8. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-09-03
[N/A][516780835] High CVE-2026-91734: Incorrect authorization in Core. Reported by Google on 2026-05-26
[N/A][516893912] High CVE-2026-91727: Incorrect reference resolution in Extensions. Reported by Google on 2026-05-26
[N/A][516947138] High CVE-2026-91743: Race condition in Core. Reported by Google on 2026-05-27
[N/A][520019273] High CVE-2026-91744: Race condition in PlatformIntegration. Reported by Google on 2026-06-04
[N/A][521486621] High CVE-2026-91712: Race condition in Extensions. Reported by Google on 2026-06-08
[N/A][521559611] High CVE-2026-91748: Race condition in Extensions. Reported by Google on 2026-06-09
[N/A][523470135] High CVE-2026-91720: Uninitialized resource in ANGLE. Reported by Google on 2026-06-13
[N/A][523554372] High CVE-2026-91731: Type confusion in Compositing. Reported by Google on 2026-06-13
[N/A][540016074] High CVE-2026-91747: Use after free in Skia. Reported by Google on 2026-07-28
[N/A][540021213] High CVE-2026-91733: Improper state validation in Skia. Reported by Google on 2026-07-28
[TBD][546413288] High CVE-2026-91741: Type confusion in CacheStorage. Reported by Salvatore Gulizia (nickname: Serotav) on 2026-08-14
[TBD][547815507] High CVE-2026-91709: Type confusion in ServiceWorker. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-08-17
[TBD][549225472] High CVE-2026-91717: Missing authorization in Android. Reported by jodyritonga on 2026-08-20
[N/A][552416113] High CVE-2026-91735: Incorrect authorization in WebUI. Reported by Google on 2026-08-25
[N/A][553115724] High CVE-2026-91708: Race condition in Network. Reported by Google on 2026-08-26
[N/A][553121008] High CVE-2026-91736: Use after free in DOM. Reported by Google on 2026-08-26
[N/A][553122373] High CVE-2026-91740: Uninitialized resource in Skia. Reported by Google on 2026-08-26
[N/A][553132148] High CVE-2026-91710: Use after free in WebAppInstalls. Reported by Google on 2026-08-26
[N/A][553133215] High CVE-2026-91718: Use after free in Core. Reported by Google on 2026-08-26
[N/A][554558368] High CVE-2026-91716: Use after free in Auth. Reported by Google on 2026-08-29
[N/A][556260782] High CVE-2026-91746: Integer overflow in Compositing. Reported by Google on 2026-09-02
[TBD][557206809] High CVE-2026-91729: Use after free in DigitalCredentials. Reported by sean geofrey on 2026-09-04
[TBD][558036280] High CVE-2026-91737: Use after free in PDF. Reported by SeungMyung Lee (@@sm1ee), Siung kim (@@ksw9722) on 2026-09-06
[TBD][558342353] High CVE-2026-91711: Out of bounds write in ServiceWorker. Reported by Cristian Di Nicola (@@crih.exe) on 2026-09-07
[TBD][558367547] High CVE-2026-91715: Type confusion in ServiceWorker. Reported by Cristian Di Nicola (@@crih.exe) on 2026-09-07
[N/A][558734727] High CVE-2026-91745: Use after free in V8. Reported by Google on 2026-09-08
[TBD][474131239] Medium CVE-2026-91723: Race condition in WebAppInstalls. Reported by Luan Herrera (@@lbherrera_) on 2026-01-07
[TBD][511062248] Medium CVE-2026-91732: Missing authorization in AppManifest. Reported by pakhunov.anton.n on 2026-05-08
[N/A][513858387] Medium CVE-2026-91742: Confused deputy in PriceTracking. Reported by Google on 2026-05-16
[N/A][517710554] Medium CVE-2026-91714: Observable discrepancy in Fonts. Reported by Google on 2026-05-29
[N/A][518032534] Medium CVE-2026-91725: Observable discrepancy in CSS. Reported by Google on 2026-05-29
[N/A][521951328] Medium CVE-2026-91739: Missing authorization in Transactions Platform. Reported by Google on 2026-06-09
[N/A][523715133] Medium CVE-2026-91713: Missing authorization in Browser. Reported by Google on 2026-06-14
[N/A][536450979] Medium CVE-2026-91738: Improper input validation in ANGLE. Reported by Google on 2026-07-19
[TBD][543640868] Medium CVE-2026-91730: Incomplete cleanup in GetUserMedia. Reported by Keita Sode and Daisuke Hatakeyama (SYZD Research) on 2026-08-07
[TBD][554953456] Medium CVE-2026-91722: Use after free in Input. Reported by TIENPA on 2026-08-31
[TBD][542115030] Low CVE-2026-91719: Code injection in XML. Reported by Zabith Mohammed (@@nmzabith) on 2026-08-03

* 153.0.8010.52
This update includes 16 security fixes. Please see the Chrome Security Page for more information.

[TBD][500417361] Critical CVE-2026-93374: Use after free in Dawn. Reported by Florian Schweitzer on 2026-04-08
[N/A][548085797] Critical CVE-2026-93372: Buffer overflow in WebGL. Reported by Google on 2026-08-17
[$3,000][550839154] High CVE-2026-93375: Incorrect reference resolution in Tracing. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-08-22
[TBD][541707261] High CVE-2026-93382: Use after free in PDFium. Reported by WinD39 - Huynh Dinh Vu on 2026-08-02
[N/A][553130676] High CVE-2026-93387: Improper state validation in Skia. Reported by Google on 2026-08-26
[N/A][553132214] High CVE-2026-93373: Use after free in Extensions. Reported by Google on 2026-08-26
[TBD][556853443] High CVE-2026-93381: Buffer overflow in PDFium. Reported by SeungMyung Lee (@@sm1ee), Siung kim (@@ksw9722) on 2026-09-03
[TBD][560039872] High CVE-2026-93379: Incorrect authorization in ORB. Reported by OGINOME Tomohito on 2026-09-11
[N/A][560121552] High CVE-2026-93377: Type confusion in V8. Reported by Google on 2026-09-11
[N/A][498411599] Medium CVE-2026-93380: Race condition in FileSystem. Reported by Google on 2026-04-01
[N/A][511832293] Medium CVE-2026-93384: Server-side request forgery in Omnibox. Reported by Google on 2026-05-10
[N/A][515493668] Medium CVE-2026-93383: Information leak in Permissions. Reported by Google on 2026-05-22
[N/A][520521197] Medium CVE-2026-93376: Out of bounds read in DataTransfer. Reported by Google on 2026-06-05
[N/A][540051167] Medium CVE-2026-93378: Missing authorization in Storage. Reported by Google on 2026-07-28
[N/A][553136980] Medium CVE-2026-93385: Information leak in Paint. Reported by Google on 2026-08-26
[N/A][513996595] Low CVE-2026-93386: UI misrepresentation in WebAppInstalls. Reported by Google on 2026-05-17
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2026-09-14 22:17:16.000000000 +0000
@


1.7
log
@
www/chromium: update to 142.0.7444.59

* 142.0.7444.59
This update includes 20 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$50000][447613211] High CVE-2025-12428: Type Confusion in V8.
Reported by Man Yue Mo of GitHub Security Lab on 2025-09-26
[$50000][450618029] High CVE-2025-12429: Inappropriate implementation
in V8. Reported by Aorui Zhang on 2025-10-10
[$10000][442860743] High CVE-2025-12430: Object lifecycle issue in
Media. Reported by round.about on 2025-09-04
[$4000][436887350] High CVE-2025-12431: Inappropriate implementation
in Extensions. Reported by Alesandro Ortiz on 2025-08-06
[N/A][439522866] High CVE-2025-12432: Race in V8.
Reported by Google Big Sleep on 2025-08-18
[N/A][449760249] High CVE-2025-12433: Inappropriate implementation
in V8. Reported by Google Big Sleep on 2025-10-07
[N/A][452296415] High CVE-2025-12036: Inappropriate implementation
in V8. Reported by Google Big Sleep on 2025-10-15
[$3000][337356054] Medium CVE-2025-12434: Race in Storage.
Reported by Lijo A.T on 2024-04-27
[$3000][446463993] Medium CVE-2025-12435: Incorrect security UI
in Omnibox. Reported by Hafiizh on 2025-09-21
[$2000][40054742] Medium CVE-2025-12436: Policy bypass in Extensions.
Reported by Luan Herrera (@@lbherrera_) on 2021-02-08
[$2000][446294487] Medium CVE-2025-12437: Use after free in PageInfo.
Reported by Umar Farooq on 2025-09-20
[$1000][433027577] Medium CVE-2025-12438: Use after free in Ozone.
Reported by Wei Yuan of MoyunSec VLab on 2025-07-20
[TBD][382234536] Medium CVE-2025-12439: Inappropriate implementation
in App-Bound Encryption. Reported by Ari Novick on 2024-12-04
[N/A][430555440] Low CVE-2025-12440: Inappropriate implementation in
Autofill. Reported by Khalil Zhani on 2025-07-09
[N/A][444049512] Medium CVE-2025-12441: Out of bounds read in V8.
Reported by Google Big Sleep on 2025-09-10
[TBD][452071845] Medium CVE-2025-12443: Out of bounds read in WebXR.
Reported by Aisle Research on 2025-10-15
[$3000][390571618] Low CVE-2025-12444: Incorrect security UI in
Fullscreen UI. Reported by syrf on 2025-01-18
[$1000][428397712] Low CVE-2025-12445: Policy bypass in Extensions.
Reported by Thomas Greiner on 2025-06-29
[$1000][444932667] Low CVE-2025-12446: Incorrect security UI in
SplitView. Reported by Hafiizh on 2025-09-14
[TBD][442636157] Low CVE-2025-12447: Incorrect security UI in Omnibox.
Reported by Khalil Zhani on 2025-09-03
@
text
@d1 1
a1 1
$NetBSD: patch-base_allocator_partition__alloc__features.cc,v 1.6 2025/10/16 19:43:18 kikadf Exp $
d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-10-13 21:41:26.000000000 +0000
d9 9
a17 9
@@@@ -143,7 +143,7 @@@@ BASE_FEATURE(PartitionAllocEventuallyZer
 // Evaluated and positive stability and peformance-wise on Linux-based systems,
 // disabled elsewhere (for now). Does not apply to Windows.
 BASE_FEATURE(PartitionAllocFewerMemoryRegions,
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_CHROMEOS)
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_BSD)
              FEATURE_ENABLED_BY_DEFAULT);
 #else
              FEATURE_DISABLED_BY_DEFAULT);
@


1.6
log
@
www/chromium: update to 141.0.7390.107

* 140.0.7339.207
This update includes 3 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[TBD][430336833] High CVE-2025-10890: Side-channel information
leakage in V8. Reported by Mate Marjanović (SharpEdged) on 2025-07-09
[N/A][443765373] High CVE-2025-10891: Integer overflow in V8.
Reported by Google Big Sleep on 2025-09-09
[N/A][444048019] High CVE-2025-10892: Integer overflow in V8.
Reported by Google Big Sleep on 2025-09-10

* 141.0.7390.54
This update includes 21 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$25000][442444724] High CVE-2025-11205: Heap buffer overflow
in WebGPU. Reported by Atte Kettunen of OUSPG on 2025-09-02
[$4000][444755026] High CVE-2025-11206: Heap buffer overflow
in Video. Reported by Elias Hohl on 2025-09-12
[$5000][428189824] Medium CVE-2025-11207: Side-channel information
leakage in Storage. Reported by Alesandro Ortiz on 2025-06-27
[$3000][397878997] Medium CVE-2025-11208: Inappropriate implementation
in Media. Reported by Kevin Joensen on 2025-02-20
[$3000][438226517] Medium CVE-2025-11209: Inappropriate implementation
in Omnibox. Reported by Hafiizh on 2025-08-13
[$3000][440523110] Medium CVE-2025-11210: Side-channel information
leakage in Tab. Reported by Umar Farooq  on 2025-08-22
[$3000][441917796] Medium CVE-2025-11211: Out of bounds read in Media.
Reported by Kosir Jakob on 2025-08-29
[$2000][420734141] Medium CVE-2025-11212: Inappropriate implementation
in Media. Reported by Ameen Basha M K on 2025-05-28
[$1000][443408317] Medium CVE-2025-11213: Inappropriate implementation
in Omnibox. Reported by Hafiizh on 2025-09-06
[N/A][439758498] Medium CVE-2025-11215: Off by one error in V8.
Reported by Google Big Sleep on 2025-08-19
[$1000][419721056] Low CVE-2025-11216: Inappropriate implementation
in Storage. Reported by Farras Givari on 2025-05-23
[N/A][439772737] Low CVE-2025-11219: Use after free in V8.
Reported by Google Big Sleep on 2025-08-19

* 141.0.7390.65
This update includes 3 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$5000][443196747] High CVE-2025-11458: Heap buffer overflow in Sync.
Reported by raven at KunLun lab on 2025-09-05
[TBD][446722008] High CVE-2025-11460: Use after free in Storage.
Reported by Sombra on 2025-09-23
[$3000][441917796] Medium CVE-2025-11211: Out of bounds read in
WebCodecs. Reported by Jakob Košir on 2025-08-29

* 141.0.7390.107
This update includes 1 security fix. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$7000][447192722] High CVE-2025-11756: Use after free in
Safe Browsing. Reported by asnine on 2025-09-25
@
text
@d1 1
a1 1
$NetBSD$
@


1.5
log
@
www/chromium: update to 140.0.7339.127

* 140.0.7339.127
This update includes 2 security fixes.
Below, we highlight fixes that were contributed by external researchers.
Please see the Chrome Security Page for more information.
[$43000][440454442] Critical CVE-2025-10200: Use after free in
Serviceworker. Reported by Looben Yang on 2025-08-22
[$30000][439305148] High CVE-2025-10201: Inappropriate implementation
in Mojo. Reported by Sahan Fernando & Anon on 2025-08-18
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-09-08 23:21:33.000000000 +0000
d9 2
a10 1
@@@@ -154,7 +154,7 @@@@ BASE_FEATURE(kPartitionAllocEventuallyZe
d12 1
a12 2
 BASE_FEATURE(kPartitionAllocFewerMemoryRegions,
              "PartitionAllocFewerMemoryRegions",
@


1.4
log
@
www/chromium: update patches
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-08-29 18:50:09.000000000 +0000
@


1.3
log
@
www/chromium: update to 139.0.7258.66

* 139.0.7258.66
This update includes 12 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$2000][414760982] Medium CVE-2025-8576: Use after free in Extensions.
Reported by asnine on 2025-04-30
[$1000][384050903] Medium CVE-2025-8577: Inappropriate implementation
in Picture In Picture. Reported by Umar Farooq on 2024-12-14
[TBD][423387026] Medium CVE-2025-8578: Use after free in Cast.
Reported by Fayez on 2025-06-09
[$10000][407791462] Low CVE-2025-8579: Inappropriate implementation in
Gemini Live in Chrome. Reported by Alesandro Ortiz on 2025-04-02
[$2000][411544197] Low CVE-2025-8580: Inappropriate implementation in
Filesystems. Reported by Huuuuu on 2025-04-18
[$2000][416942878] Low CVE-2025-8581: Inappropriate implementation in
Extensions. Reported by Vincent Dragnea on 2025-05-11
[$1000][40089450] Low CVE-2025-8582: Insufficient validation of
untrusted input in DOM. Reported by Anonymous on 2017-10-31
[$500][373794472] Low CVE-2025-8583: Inappropriate implementation in
Permissions. Reported by Shaheen Fazim on 2024-10-16
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-07-29 22:51:44.000000000 +0000
d9 1
a9 1
@@@@ -164,7 +164,7 @@@@ BASE_FEATURE(kPartitionAllocEventuallyZe
a17 9
@@@@ -489,7 +489,7 @@@@ BASE_FEATURE(kPartitionAllocAdjustSizeWh
 #if PA_CONFIG(ENABLE_SHADOW_METADATA)
 BASE_FEATURE(kPartitionAllocShadowMetadata,
              "PartitionAllocShadowMetadata",
-#if BUILDFLAG(IS_LINUX)
+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_BSD)
              FEATURE_ENABLED_BY_DEFAULT);
 #else
              FEATURE_DISABLED_BY_DEFAULT);
@


1.2
log
@www/chromium: update to 138.0.7204.168

* 138.0.7204.157
This update includes 6 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$7000][425583995] High CVE-2025-7656: Integer overflow in V8.
Reported by Shaheen Fazim on 2025-06-17
[NA][427162086] High CVE-2025-6558: Incorrect validation of
untrusted input in ANGLE and GPU. Reported by Clément Lecigne
and Vlad Stolyarov of Google's Threat Analysis Group on 2025-06-23
[TBD][427681143] High CVE-2025-7657: Use after free in WebRTC.
Reported by jakebiles on 2025-06-25

Google is aware that an exploit for CVE-2025-6558 exists in the wild.

* 138.0.7204.168
This update includes 3 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$8000][430344952] High CVE-2025-8010: Type Confusion in V8.
Reported by Shaheen Fazim on 2025-07-09
[TBD][430572435] High CVE-2025-8011: Type Confusion in V8.
Reported by Shaheen Fazim on 2025-07-09
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-07-21 19:32:31.000000000 +0000
d18 9
@


1.1
log
@www/chromium: update to 138.0.7204.96

* Patchset changes:
base/system/sys_info_netbsd.cc: fix SysInfo::AmountOfAvailablePhysicalMemoryImpl()
v8/src/base/platform/platform-posix.cc: use pid instead of lid in OS::GetCurrentThreadIdInternal()

* AudioIO: update to 138.0, apply changes from qt6-qtwebengine by Mark Davies

* 137.0.7151.55
This update includes 11 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[TBD][411573532] High CVE-2025-5063: Use after free in Compositing.
Reported by Anonymous on 2025-04-18
[TBD][417169470] High CVE-2025-5280: Out of bounds write in V8.
Reported by [pwn2car] on 2025-05-12
[$4000][40058068] Medium CVE-2025-5064: Inappropriate implementation
in Background Fetch API. Reported by Maurice Dauer  on 2021-11-29
[$2000][40059071] Medium CVE-2025-5065: Inappropriate implementation
in FileSystemAccess API. Reported by NDevTK on 2022-03-11
[$1000][356658477] Medium CVE-2025-5066: Inappropriate implementation
in Messages. Reported by Mohit Raj (shadow2639)  on 2024-07-31
[TBD][417215501] Medium CVE-2025-5281: Inappropriate implementation
in BFCache. Reported by Jesper van den Ende (Pelican Party Studios) on 2025-05-12
[TBD][419467315] Medium CVE-2025-5283: Use after free in libvpx.
Reported by Mozilla on 2025-05-22
[$500][40075024] Low CVE-2025-5067: Inappropriate implementation
in Tab Strip. Reported by Khalil Zhani on 2023-10-17

As usual, our ongoing internal security work was responsible for a
wide range of fixes:
[419294325] Various fixes from internal audits, fuzzing and other initiatives

* 137.0.7151.68
This update includes 3 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[N/A][420636529] High CVE-2025-5419: Out of bounds read and write
in V8. Reported by Clement Lecigne and Benoît Sevens of Google Threat Analysis Group
on 2025-05-27. This issue was mitigated on 2025-05-28 by a configuration change
pushed out to Stable across all Chrome platforms.
[$1000][409059706] Medium CVE-2025-5068: Use after free in Blink.
Reported by Walkman on 2025-04-07
Google is aware that an exploit for CVE-2025-5419 exists in the wild.

* 137.0.7151.103
This update includes 2 security fixes. Below, we highlight fixes
that were contributed by external researchers. Please see the
Chrome Security Page for more information.
[$8000][420150619] High CVE-2025-5958: Use after free in Media.
Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2025-05-25
[NA][422313191] High CVE-2025-5959: Type Confusion in V8.
Reported by Seunghyun Lee as part of TyphoonPWN 2025 on 2025-06-04

* 137.0.7151.119
This update includes 3 security fixes.
Below, we highlight fixes that were contributed by external researchers.
Please see the Chrome Security Page for more information.
[$7000][420697404] High CVE-2025-6191: Integer overflow in V8.
Reported by Shaheen Fazim on 2025-05-27
[$4000][421471016] High CVE-2025-6192: Use after free in Profiler.
Reported by Chaoyuan Peng (@@ret2happy) on 2025-05-31

* 138.0.7204.49
This update includes 11 security fixes.
Below, we highlight fixes that were contributed by external researchers.
Please see the Chrome Security Page for more information.
[$4000][407328533] Medium CVE-2025-6555: Use after free in Animation.
Reported by Lyra Rebane (rebane2001) on 2025-03-30
[$1000][40062462] Low CVE-2025-6556: Insufficient policy enforcement in
Loader. Reported by Shaheen Fazim on 2023-01-02
[$1000][406631048] Low CVE-2025-6557: Insufficient data validation in
DevTools. Reported by Ameen Basha M K on 2025-03-27

* 138.0.7204.96
This update includes 1 security fix.
Below, we highlight fixes that were contributed by external researchers.
Please see the Chrome Security Page for more information.
[NA][427663123] High CVE-2025-6554: Type Confusion in V8.
Reported by Clément Lecigne of Google's Threat Analysis Group on 2025-06-25.
This issue was mitigated on 2025-06-26 by a configuration change
pushed out to Stable channel across all platforms.

Google is aware that an exploit for CVE-2025-6554 exists in the wild.
@
text
@d7 1
a7 1
--- base/allocator/partition_alloc_features.cc.orig	2025-06-30 06:54:11.000000000 +0000
@