BSD Portschromium -- security fixes
· CVE-2026-125345, CVE-2026-125347, CVE-2026-125343, CVE-2026-125348, CVE-2026-125344, CVE-2026-125346, CVE-2026-125350, CVE-2026-125349, CVE-2026-125342 · VuXML entry
Chrome Releases reports: This update includes 9 security fixes: High CVE-2026-125345: Uninitialized resource in WebGL. High CVE-2026-125347: Incorrect authorization in FileSystem. High CVE-2026-125343: Buffer overflow in Compositing. High CVE-2026-125348: Out of bounds write in GPU. High CVE-2026-125344: Type confusion in V8. High CVE-2026-125346: Use after free in XML. High CVE-2026-125350: Use after free in XML. …
Affected versions
- chromium < 157.0.8103.50
- ungoogled-chromium < 157.0.8103.50
- linux-chrome < 157.0.8103.50
By system
4 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | www/chromium | 156.0.8078.47 | vulnerable since 2026-11-10 | |
| OpenBSD | www/chromium | 157.0.8103.50 | out of range, by version | |
| NetBSD | www/chromium | 152.0.7977.82nb1 | not listed | |
| MidnightBSD | www/chromium | 156.0.8078.79 | in range, by version | |
| FreeBSD | www/chromium | 156.0.8078.79_1 | vulnerable since 2026-11-10 | |
| DragonFly | www/ungoogled-chromium | 151.0.7922.169_4 | vulnerable since 2026-11-10 | |
| OpenBSD | www/ungoogled-chromium | 157.0.8103.50 | out of range, by version | |
| MidnightBSD | www/ungoogled-chromium | 156.0.8078.79 | in range, by version | |
| FreeBSD | www/ungoogled-chromium | 156.0.8078.79_1 | vulnerable since 2026-11-10 | |
| FreeBSD | www/linux-chrome | 157.0.8103.50 | fixed | (1 days after) |
| MidnightBSD | www/linux-chrome | 140.0.7339.80_1 | in range, by version |