Hello All,
The Stable channel is being updated to 128.0.6613.133 (Platform version: 15964.48.0) for ChromeOS devices and will be rolled out over the next few days.
If you find new issues, please let us know one of the following ways:
ChromeOS Vulnerability Rewards Program Reported Bug Fixes:
N/A
Other 3rd Party Security Fixes Included:
Android Security fixes can be found here
Chrome Browser Security Fixes:
Users who are pinned to a specific release of ChromeOS will not receive these security fixes or any other security fixes. We recommend updating to the latest version of Stable to ensure you are protected against exploitation of known vulnerabilities.
The Dev channel has been updated to 130.0.6699.3 for Windows, Mac and Linux.
A partial list of changes is available in the Git log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Daniel YipGoogle Chrome
A new LTC-126 version 126.0.6478.252 (Platform Version: 15886.77.0), is being rolled out for most ChromeOS devices.
This version includes fixes for:
356196918 High CVE-2024-7965 Inappropriate implementation in V8
351327767 High CVE-2024-6779 Out of bounds memory access in V8
The Dev channel is being updated to OS version: 16021.0.0, Browser version: 130.0.6695.0, for most ChromeOS devices.
Giuliana Pritchard,
Google ChromeOS
Hi everyone! We've just released Chrome Dev 130 (130.0.6696.0) for Android. It's now available on Google Play.
You can see a partial list of the changes in the Git log. For details on new features, check out the Chromium blog, and for details on web platform updates, check here.
If you find a new issue, please let us know by filing a bug.
Erhu AkpobaroGoogle Chrome
Hi, everyone! We've just released Chrome 128 (128.0.6613.127) for Android . It'll become available on Google Play over the next few days.
The Beta channel is being updated to OS version: 16002.17.0, Browser version: 129.0.6668.28 for most ChromeOS devices.
Matt Nelson,
Hi everyone! We've just released Chrome Beta 129 (129.0.6668.31) for iOS; it'll become available on App Store in the next few days.
You can see a partial list of the changes in the Git log. If you find a new issue, please let us know by filing a bug.
Krishna GovindGoogle Chrome
The Beta channel has been updated to 129.0.6668.29 for Windows, Mac and Linux.
Srinivas SistaGoogle Chrome
Hi everyone! We've just released Chrome Beta 129 (129.0.6668.31) for Android. It's now available on Google Play.
The Stable channel has been released for 128.0.6613.118 (Platform version: 15964.41.0) for most ChromeOS devices.
Google ChromeOS.
LTS-120 is being updated in the LTS (Long Term Support) channel, version 120.0.6099.331 (Platform Version: 15662.119.0), for most ChromeOS devices.
The Stable channel has been updated to 128.0.6613.119/.120 for Windows, Mac and 128.0.6613.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.
The Extended Stable channel has been updated to 128.0.6613.120 for Windows and Mac which will roll out over the coming days/weeks.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
This update includes 4 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.
[$7000][357391257] High CVE-2024-8362: Use after free in WebAudio. Reported by Cassidy Kim(@cassidy6564) on 2024-08-05
[TBD][358485426] High CVE-2024-7970: Out of bounds write in V8. Reported by Cassidy Kim(@cassidy6564) on 2024-08-09
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.As usual, our ongoing internal security work was responsible for a wide range of fixes:
[364012614] Various fixes from internal audits, fuzzing and other initiatives
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
