Google heeft een update voor versie 17 van zijn webbrowser Chrome uitgebracht. Google Chrome is beschikbaar in drie verschillende uitvoeringen: stable, bèta en dev. Developmentversies zitten in een vroeg stadium van ontwikkeling en zijn dus het minst stabiel. In versie 17 is onder andere de omnibox verbeterd. Terwijl je nog bezig bent de zoekterm in te tikken haalt Google alvast de pagina op die het denkt dat je wilt zien. Deze verschijnt daardoor een stuk sneller. Verder worden nu ook downloads tegen het licht gehouden om zo de gebruiker beter te beschermen. De verbeteringen die Google met deze update doorvoert, kunnen hieronder worden gevonden.
Stable Channel UpdateThe Chrome Stable channel has been updated to 17.0.963.65 on Windows, Mac, Linux and Chrome Frame. This release fixes a number of issues including:
Along with these fixes, the release contains an updated version of the Adobe Flash player. More information on Flash updates is available from Adobe.
- Cursors and backgrounds sometimes do not load (bug 111218)
- Plugins not loading on some pages (bug 108228)
- Text paste includes trailing spaces (bug 106551)
- Websites using touch controls break (bug 110332)
Security fixes and rewards:
Firstly, we have some special rewards for some special bugs!To determine the above rewards, we looked at bug finding performance over the past few months. The three named individuals stood out significantly. It also shouldn’t come as a surprise that they all feature (and earn more!) in the release notes below.
- [116661] Rockstar CVE-1337-d00d1: Excessive WebKit fuzzing.
- [116662] Legend CVE-1337-d00d2: Awesome variety of fuzz targets.
- [116663] Superhero CVE-1337-d00d3: Significant pain inflicted upon SVG.
We have always reserved the right to arbitrarily reward sustained, extraordinary contributions. In this instance, we’re dropping a surprise bonus. We reserve the right to do so again and reserve the right to do so on a more regular basis! Chrome has a leading reputation for security and it wouldn’t be possible without the aggressive bug hunting of the wider community.
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.The majority of the above bugs were detected using AddressSanitizer, which rocks.
- [105867] High CVE-2011-3031: Use-after-free in v8 element wrapper.
- [108037] High CVE-2011-3032: Use-after-free in SVG value handling.
- [108406] [115471] High CVE-2011-3033: Buffer overflow in the Skia drawing library.
- [111748] High CVE-2011-3034: Use-after-free in SVG document handling.
- [112212] High CVE-2011-3035: Use-after-free in SVG use handling.
- [113258] High CVE-2011-3036: Bad cast in line box handling.
- [113439] [114924] [115028] High CVE-2011-3037: Bad casts in anonymous block splitting.
- [113497] High CVE-2011-3038: Use-after-free in multi-column handling.
- [113707] High CVE-2011-3039: Use-after-free in quote handling.
- [114054] High CVE-2011-3040: Out-of-bounds read in text handling.
- [114068] High CVE-2011-3041: Use-after-free in class attribute handling.
- [114219] High CVE-2011-3042: Use-after-free in table section handling.
- [115681] High CVE-2011-3043: Use-after-free in flexbox with floats.
- [116093] High CVE-2011-3044: Use-after-free with SVG animation elements.
More detailed updates are available on the Chrome Blog. Full details about what changes are in this release are available in the SVN revision log. Interested in hopping on the stable channel? Find out how. If you find a new issue, please let us know by filing a bug.
:fill(white):strip_exif()/i/2002189289.jpeg?f=thumbmedium)
:strip_icc():strip_exif()/u/213490/icon.jpg?f=community){kind=icon}
/u/169835/crop652f87577da60_cropped.png?f=community){kind=small}
:strip_icc():strip_exif()/u/332059/Pineka.jpg?f=community){kind=small}
/u/294566/tennis.png?f=community){kind=small}
