Anzeigen der neuesten Beiträge
0 Mitglieder und 6 Gäste betrachten dieses Thema.
The Dev Channel has been updated to 35.0.1862.2 for Windows and Linux (mac coming soon)This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN Log.
The Stable Channel has been updated to 33.0.1750.146 for Windows, Mac, and Linux.Security Fixes and RewardsThis update includes 19 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.[$1000][344492] High CVE-2013-6663: Use-after-free in svg images. Credit to Atte Kettunen of OUSPG.[$500][326854] High CVE-2013-6664: Use-after-free in speech recognition. Credit to Khalil Zhani.[$2000][337882] High CVE-2013-6665: Heap buffer overflow in software rendering. Credit to cloudfuzzer.[332023] Medium CVE-2013-6666: Chrome allows requests in flash header request. Credit to netfuzzerr.As usual, our ongoing internal security work responsible for a wide range of fixes:[348175] CVE-2013-6667: Various fixes from internal audits, fuzzing and other initiatives.[343964, 344186, 347909] CVE-2013-6668: Multiple vulnerabilities in V8 fixed in version 3.24.35.10.Many of the above bugs were detected using AddressSanitizer.This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Dev Channel has been updated to 35.0.1870.2 for Windows, Mac and LinuxThis release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Beta Channel has been updated to 34.0.1847.45 for Windows, Mac, and Linux.This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Stable Channel has been updated to 33.0.1750.149 for Windows, Mac, and Linux.Security Fixes and RewardsThis update includes 7 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.[$4000][344881] High CVE-2014-1700: Use-after-free in speech. Credit to Chamal de Silva.[$3000][342618] High CVE-2014-1701: UXSS in events. Credit to aidanhs.[$1000][333058] High CVE-2014-1702: Use-after-free in web database. Credit to Collin Payne.As usual, our ongoing internal security work responsible for a wide range of fixes:[338354] High CVE-2014-1703: Potential sandbox escape due to a use-after-free in web sockets.[328202, 349079, 345715] CVE-2014-1704: Multiple vulnerabilities in V8 fixed in version 3.23.17.18.Many of the above bugs were detected using AddressSanitizer.This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Dev Channel has been updated to 35.0.1883.0 for Windows, Mac (and Linux coming soon)This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Beta Channel has been updated to 34.0.1847.60 for Windows, Mac and Linux.This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Stable Channel has been updated to 33.0.1750.152 for Mac and Linux and 33.0.1750.154 for Windows.Security Fixes and RewardsCongratulations to VUPEN and an Anonymous submission for winning the Pwn2Own competition. [$100,000] [352369] Code execution outside sandbox. Credit to VUPEN. [352374] High CVE-2014-1713: Use-after-free in Blink bindings [352395] High CVE-2014-1714: Windows clipboard vulnerability [$60,000] [352420] Code execution outside sandbox. Credit to Anonymous. [351787] High CVE-2014-1705: Memory corruption in V8 [352429] High CVE-2014-1715: Directory traversal issueWe’re delighted at the success of Pwn2Own and the ability to study full exploits. We anticipate landing additional changes and hardening measures for these vulnerabilities in the near future. We also believe that both submissions are works of art and deserve wider sharing and recognition. We plan to do technical reports on both Pwn2Own submissions in the future.
The Dev Channel has been updated to 35.0.1897.2 for Windows and Linux and 35.0.1897.3 for MacThis release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Beta Channel has been updated to 34.0.1847.76 for Windows, and Mac. (Linux coming soon).This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Dev Channel has been updated to 35.0.1908.3 for Windows, Mac and LinuxThis release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Beta Channel has been updated to 34.0.1847.92 for Windows, Mac and Linux.This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Dev Channel has been updated to 35.0.1912.2 for Windows, Mac and LinuxThis release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.
The Dev Channel has been updated to 35.0.1916.6 for Windows, Mac ( and Linux coming soon)This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log.