Google heeft versie 33 van zijn webbrowser Chrome uitgebracht. Google Chrome is beschikbaar in drie uitvoeringen: stable, beta en dev, en ditmaal is de stabiele uitvoering bijgewerkt. In versie 33 zijn geen nieuwe features toegevoegd, maar zijn er wel weer de nodige bugfixes en beveiligingsupdates doorgevoerd. Versie 33 markeert ook het einde van Google Chrome Frame, want deze is met pensioen gestuurd. De release notes voor deze uitgave kunnen hieronder worden gevonden.
Stable Channel Update
The Stable Channel has been updated to 33.0.1750.117 for Windows, Mac, and Linux.
Security Fixes and Rewards
This update includes 28 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.As usual, our ongoing internal security work responsible for a wide range of fixes:
- [334897] High CVE-2013-6652: Issue with relative paths in Windows sandbox named pipe policy.
- [331790] High CVE-2013-6653: Use-after-free related to web contents.
- [333176] High CVE-2013-6654: Bad cast in SVG.
- [293534] High CVE-2013-6655: Use-after-free in layout.
- [331725] High CVE-2013-6656: Information leak in XSS auditor.
- [331060] Medium CVE-2013-6657: Information leak in XSS auditor.
- [322891] Medium CVE-2013-6658: Use-after-free in layout.
- [306959] Medium CVE-2013-6659: Issue with certificates validation in TLS handshake.
- [332579] Low CVE-2013-6660: Information leak in drag and drop.
Many of the above bugs were detected using AddressSanitizer.
- [344876] Low-High CVE-2013-6661: Various fixes from internal audits, fuzzing and other initiatives. Of these, seven are fixes for issues that could have allowed for sandbox escapes from compromised renderers.
General Announcements
Google Chrome Frame has been retired, please read our June 2013 Chromium blog post for additional details and background.
This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.