Thursday, November 10, 2011

Stable Channel Update


The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms

All
  • Updated V8 - 3.5.10.23
  • Fix small print sizing issues (issues: 10218682472102154)
  • This new build also contains a new version of Flash which contains security fixes. (Release Notes)
Mac
  • Fixed the "certificate is not yet valid" error for server certificate issued by a VeriSign intermediate CA. (issue 101555)
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

  • [$500] [100465] High CVE-2011-3892: Double free in Theora decoder. Credit to Aki Helin of OUSPG.
  • [$500] [100492] [100543] Medium CVE-2011-3893: Out of bounds reads in MKV and Vorbis media handlers. Credit to Aki Helin of OUSPG.
  • [101172] High CVE-2011-3894: Memory corruption regression in VP8 decoding. Credit to Andrew Scherkus of the Chromium development community.
  • [$1000] [101458] High CVE-2011-3895: Heap overflow in Vorbis decoder. Credit to Aki Helin of OUSPG.
  • [101624] High CVE-2011-3896: Buffer overflow in shader variable mapping. Credit to Ken “strcpy” Russell of the Chromium development community.
  • [102242] High CVE-2011-3897: Use-after-free in editing. Credit to pa_kt reported through ZDI (ZDI-CAN-1416).
  • [102461] Low CVE-2011-3898: Failure to ask for permission to run applets in JRE7. Credit to Google Chrome Security Team (Chris Evans).
The bugs [100465], [100492], [100543] and [101458] were detected using AddressSanitizer


Full details about what changes have been made in this release are available in the SVN revisions log. Interested in switching to another channel?  Find out how.  If you find a new issue, please let us know by filing a bug.



Karen Grunberg
Google Chrome

Labels:

10 Comments:

Blogger John D said...

Why does 15.0.874.120 show up as 15.3.27256 in Uninstall Programs on Windows 7?

11:28 AM, November 10, 2011  
Blogger msi2 said...

Does extensions still crash randomly?

11:38 AM, November 10, 2011  
Blogger Mamdouh said...

please update policy list and added
allow running insecure content to it

4:43 PM, November 10, 2011  
Blogger Mainman678 said...

built in crash always crashes. when will google fix this.????

6:12 PM, November 10, 2011  
Blogger trik bisnis said...

i thinks its good info men, thanks a lot from justin

12:03 AM, November 11, 2011  
Anonymous Anonymous said...

This comment has been removed by a blog administrator.

10:57 AM, November 14, 2011  
Anonymous Anonymous said...

Can you make Chrome create a folder in /AppData/Local/Temp for updates in order to who use software restriction policies can set that folder allow?

10:59 AM, November 14, 2011  
Blogger Nat said...

The memory leak has gone from bad to worse in this release though especially with flash video

7:28 AM, November 15, 2011  
Blogger ComputerX said...

GoogleChromeStandaloneEnterprise.msi downloaded on 11/14/2011 and 11/15/2011 show the ProductVersion property as 15.3.27256.

12:54 PM, November 16, 2011  
Blogger bilgisayarkursu said...

This comment has been removed by a blog administrator.

1:25 PM, November 19, 2011  

Post a Comment

Subscribe to Post Comments [Atom]

<< Home