BSD Portschromium -- security fixes
· CVE-2026-95350, CVE-2026-95357, CVE-2026-95339, CVE-2026-95281, CVE-2026-95313, CVE-2026-95349, CVE-2026-95284, CVE-2026-95322, CVE-2026-95329, CVE-2026-95356, CVE-2026-95310, CVE-2026-95301, CVE-2026-95291, CVE-2026-95355, CVE-2026-95315, CVE-2026-95298, CVE-2026-95372, CVE-2026-95324, CVE-2026-95283, CVE-2026-95293, CVE-2026-95274, CVE-2026-95282, CVE-2026-95373, CVE-2026-95277, CVE-2026-95348, CVE-2026-95335, CVE-2026-95338, CVE-2026-95318, CVE-2026-95286, CVE-2026-95365, CVE-2026-95343, CVE-2026-95280, CVE-2026-95304, CVE-2026-95306, CVE-2026-95299, CVE-2026-95351, CVE-2026-95287, CVE-2026-95366, CVE-2026-95382, CVE-2026-95381, CVE-2026-95331, CVE-2026-95297, CVE-2026-95375, CVE-2026-95302, CVE-2026-95362, CVE-2026-95369, CVE-2026-95376, CVE-2026-95359, CVE-2026-95294, CVE-2026-95337, CVE-2026-95346, CVE-2026-95320, CVE-2026-95317, CVE-2026-95345, CVE-2026-95330, CVE-2026-95370, CVE-2026-95303, CVE-2026-95360, CVE-2026-95295, CVE-2026-95276, CVE-2026-95314, CVE-2026-95371, CVE-2026-95353, CVE-2026-95363, CVE-2026-95341, CVE-2026-95354, CVE-2026-95384, CVE-2026-95336, CVE-2026-95290, CVE-2026-95325, CVE-2026-95275, CVE-2026-95374, CVE-2026-95300, CVE-2026-95321, CVE-2026-95323, CVE-2026-95332, CVE-2026-95312, CVE-2026-95344, CVE-2026-95289, CVE-2026-95347, CVE-2026-95311, CVE-2026-95358, CVE-2026-95333, CVE-2026-95307, CVE-2026-95285, CVE-2026-95278, CVE-2026-95327, CVE-2026-95334, CVE-2026-95308, CVE-2026-95292, CVE-2026-95352, CVE-2026-95279, CVE-2026-95367, CVE-2026-95385, CVE-2026-95368, CVE-2026-95319, CVE-2026-95326, CVE-2026-95309, CVE-2026-95361, CVE-2026-95288, CVE-2026-95380, CVE-2026-95342, CVE-2026-95296, CVE-2026-95316, CVE-2026-95328, CVE-2026-95340, CVE-2026-95364, CVE-2026-95305 · VuXML entry
Chrome Releases reports: This update includes 108 security fixes: [551573368] Critical CVE-2026-95350: Buffer overflow in ANGLE. [530045332] Critical CVE-2026-95357: Out of bounds write in GPU. [548585299] Critical CVE-2026-95339: Use after free in ServiceWorker. [551708184] Critical CVE-2026-95281: Buffer overflow in ANGLE. [552665794] Critical CVE-2026-95313: Use after free in Fullscreen. [553172761] Critical …
Affected versions
- chromium < 154.0.8037.57
- ungoogled-chromium < 154.0.8037.57
By system
2 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | www/chromium | 137.0.7151.119 | vulnerable since 2026-09-26 | |
| OpenBSD | www/chromium | 156.0.8078.47 | out of range, by version | |
| NetBSD | www/chromium | 152.0.7977.82 | not listed | |
| MidnightBSD | www/chromium | 152.0.7977.75 | in range, by version | |
| FreeBSD | www/chromium | 156.0.8078.47_1 | fixed | |
| FreeBSD | www/ungoogled-chromium | 151.0.7922.169_5 | vulnerable since 2026-09-26 | |
| OpenBSD | www/ungoogled-chromium | 155.0.8059.84 | out of range, by version | |
| MidnightBSD | www/ungoogled-chromium | 151.0.7922.169_1 | in range, by version |