Monday, April 15, 2013

Stable Channel Update for Chrome OS

The Stable channel has been updated to 26.0.1410.57 (Platform version: 3701.81.2) for all Chrome OS devices. This build contains some security improvements. Machines will be receiving updates over the next several days.

Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [227197] Medium CVE-2013-2832: Uninitialized memory left in buffer in O3D plug-in. Credit to Ralf-Philipp Weinmann.
  • [227181] High CVE-2013-2833: Use-after-free in O3D plug-in. Credit to Ralf-Philipp Weinmann.
  • [227158] High CVE-2013-2834: Origin lock bypass of O3D and Google Talk plug-ins. Credit to Ralf-Philipp Weinmann.
  • [196456] High CVE-2013-2835: Origin lock bypass of O3D and Google Talk plug-ins. Credit to Google Chrome Security Team (Chris Evans).
We’re pleased to reward Ralf-Philipp Weinmann $31,336 under the Chromium Vulnerability Rewards Program for a chain of three bugs, including demo exploit code and very detailed write-up. We are grateful to Ralf for his work to help keep our users safe.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Ben Henry
Google Chrome

10 comments:

דניאל שרון said...

31k$?! Dang, congratz!

Cliff Smith said...

I thought it was my computer having a deffect but the top right corner of my Chrome window has a Minimize - Maximize and X close button that will not work properly. I removed this application and downloaded another new one but it has the same Boo Boo. I can deal with it but please let me know what is wrong or what I am doing wrong ? isayah511@yahoo.com

Móĥặmeḓ Bưffón said...
This comment has been removed by a blog administrator.
Harry said...
This comment has been removed by the author.
lou said...

When will the update go out to the uk. still on upto date on 64 even when i click on about g.c . uninstalled and installed g.c but still says 64 your g.c is upto date

Zakariya said...

Many congratulations to Ralf-Philipp. Got the update here in the UK about 10 mins ago

lou said...

Still no update for me in the uk when i click on the about google chrome link. still says 64 is upto date. anyone from chrome on here.gonna have to use IE if the update doesnt come soon. anyone else in the uk not have the update or is there an issue with ny chrome?

lou said...
This comment has been removed by the author.
lou said...
This comment has been removed by the author.
lou said...

What does chrome operating system mean interms of the update? is that just for chromebooks or does it mean any machine that uses the chrome browser eg windows, mac