This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Google Chrome updated

74 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

Google Chrome multiple vulns - update available
- http://secunia.com/advisories/36417/2/
Release Date: 2009-08-26
Critical: Highly critical
Impact: Spoofing, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 2.x …
Solution: Update to version 2.0.172.43.
Original Advisory:
http://googlechromereleases.blogspot.com/2…rity-fixes.html

http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-2935
http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-2414
http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2009-2416

> http://www.google.com/chrome/
For Windows Vista/XP SP2

:ph34r:
FYI…

Google Chrome multiple vulns - update available
- http://secunia.com/advisories/37273/2/
Release Date: 2009-11-06
Critical: Moderately critical
Impact: Exposure of system information, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 3.x …
Solution: Update to version 3.0.195.32…
Original Advisory: Google:
http://googlechromereleases.blogspot.com/2…nel-update.html

Download:
- http://www.google.com/chrome/

:ph34r:
FYI…

Google Chrome v4.0.249.78 released
- http://googlechromereleases.blogspot.com/2…-update_25.html
January 25, 2010 - "The stable channel has been updated to 4.0.249.78 for Windows, and includes the following features and security fixes (since 3.0):
* Extensions
* Bookmark sync
* Enhanced developer tools
* HTML5: Notifications, Web Database, Local Storage, WebSockets, Ruby support
* v8 performance improvements
* Skia performance improvements
* Full ACID3 pass, due to re-enabled remote font support (with added defense against bugs in operating system font libraries)
* HTTP byte range support
* New security feature: "Strict Transport Security" support
* Experimental new anti-reflected-XSS feature called "XSS Auditor"
Security Fixes:
Please see the Chromium security page* for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix…"
* http://sites.google.com/a/chromium.org/dev…m-security-bugs

- http://securitytracker.com/alerts/2010/Jan/1023506.html
Date: Jan 26 2010

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

- http://secunia.com/advisories/37769/2/
Release Date: 2010-01-26
Critical: Highly critical
Impact: Security Bypass, Exposure of sensitive information, DoS, System access
Where: From remote
Software: Google Chrome 3.x
Solution: Upgrade to version 4.0.249.78…
Original Advisory: Secunia Research: http://secunia.com/secunia_research/2009-65/
Google: http://googlechromereleases.blogspot.com/2…-update_25.html

:ph34r:
FYI…

Google Chrome v4.0.249.89 released
- http://secunia.com/advisories/38545/
Release Date: 2010-02-11
Ciriticality: Highly critical
Impact: Manipulation of data, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x
Solution: Update to version 4.0.249.89.
Original Advisory:
http://googlechromereleases.blogspot.com/2…nel-update.html
"The stable channel has been updated to 4.0.249.89 for Windows…"

:ph34r:
FYI…

Google Chrome 4.1.249.1059 released
- http://secunia.com/advisories/39544/
Release Date: 2010-04-21
Criticality level: Highly critical
Impact: Cross Site Scripting, System access, Unknown
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x …
Solution: Update to version 4.1.249.1059.
Original Advisory:
http://googlechromereleases.blogspot.com/2…rity-fixes.html
April 20, 2010

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

:ph34r:
FYI…

Google Chrome v4.1.249.1064 released
- http://secunia.com/advisories/39651/
Release Date: 2010-04-28
Criticality level: Highly critical
Impact: Security Bypass, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x
Solution: Update to version 4.1.249.1064.
Original Advisory:
http://googlechromereleases.blogspot.com/2…rity-fixes.html
April 27, 2010

- http://royal.pingdom.com/2010/04/08/the-mo…ers-to-upgrade/
April 8, 2010 - "… Google has taken a very different approach to upgrades compared to other browser makers. Their mantra: Don’t ask the user to upgrade, just do it. Google Chrome handles its upgrades in a completely automated fashion, even for a completely new version of the browser… Chrome will just handle that in the background and move ahead with the upgrade…"

- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-1663
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-1664
- http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2010-1665

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

:ph34r:
FYI…

Google Chrome v5.0.375.55 released
- http://secunia.com/advisories/39934/
Release Date: 2010-05-27
Criticality level: Moderately critical
Impact: Unknown, Security Bypass, Spoofing
Where: From remote
… The vulnerabilities are reported in versions prior to 5.0.375.55.
Solution: Upgrade to version 5.0.375.55…
- http://googlechromereleases.blogspot.com/2…nel-update.html
May 25, 2010
- http://chrome.blogspot.com/2010/05/new-chr…elcome-mac.html

- http://securitytracker.com/alerts/2010/May/1024037.html
May 27 2010 … prior to 5.0.375.55

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

:ph34r: