Chrome 40.0.2214.111 released
- http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html
Feb 5, 2015 - "The stable channel has been updated to 40.0.2214.111 for Windows, Mac and Linux… Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed.
This update includes 11 security fixes…"
___
- http://www.securitytracker.com/id/1031709
CVE Reference: CVE-2015-1209, CVE-2015-1210, CVE-2015-1211, CVE-2015-1212
Feb 6 2015
Impact: Disclosure of system information, Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 40.0.2214.111 …
Solution: The vendor has issued a fix (40.0.2214.111).
The vendor's advisory is available at:
- http://googlechromereleases.blogspot.com/2015/02/stable-channel-update.html
Chrome 41.0.2272.76 released
- http://googlechromereleases.blogspot.dk/2015/03/stable-channel-update.html
Mar 3, 2015 - "The Chrome team is delighted to announce the promotion of Chrome 41 to the stable channel for Windows, Mac and Linux. Chrome 41.0.2272.76 contains a number of fixes and improvements, including:
A number of new apps/extension APIs
Lots of under the hood changes for stability and performance
This update includes -51- security fixes…"
___
Chrome 42.0.2311.90 released
- http://googlechromereleases.blogspot.com/2015/04/stable-channel-update_14.html
April 14, 2015 - "The Chrome team is overjoyed to announce the promotion of Chrome 42 to the stable channel for Windows, Mac and Linux. Chrome 42.0.2311.90 contains a number of fixes and improvements… This update includes -45- security fixes…"
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
___
Chrome 43.0.2357.65 released
- http://googlechromereleases.blogspot.com/2015/05/stable-channel-update_19.html
May 19, 2015 - "The Chrome team is happy to announce the promotion of Chrome 43 to the stable channel for Windows, Mac and Linux. Chrome 43.0.2357.65 contains a number of fixes and improvements… This update includes -37- security fixes…"
___
Chrome 43.0.2357.124 released
- http://googlechromereleases.blogspot.com/2015/06/stable-channel-update.html
June 9, 2015 - "The stable channel has been updated to 43.0.2357.124 for Windows, Mac and Linux. A partial list of changes is available in the log. Key Changes:
Updated Adobe Flash Player to 18.0.0.160 …"
Chrome v43.0.2357.130 released
- http://googlechromereleases.blogspot.com/2015/06/chrome-stable-update.html
June 22, 2015 - "The stable channel has been updated to 43.0.2357.130 for Windows, Mac, and Linux. A partial list of changes is available in the log… Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
Below, we highlight 4 fixes that were contributed by external researchers… High CVE-2015-1266: Scheme validation error in WebUI. Credit to anonymous. High CVE-2015-1268: Cross-origin bypass in Blink. Credit to Mariusz Mlynski.
Medium CVE-2015-1267: Cross-origin bypass in Blink. Credit to anonymous.
Medium CVE-2015-1269: Normalization error in HSTS/HPKP preload list. Credit to Mike Ruddy…"
… comments:
- July 08, 2015
> "… this version of Chrome does include Flash 18.0.0.203"
> "… the schedule has Chrome 44 arriving July 14, 2015, with Chrome 45 following in early September (1st or 8th)."
Chrome 43.0.2357.134 released
- http://googlechromereleases.blogspot.com/2015_07_01_archive.html
July 14, 2015 - "The stable channel has been updated to 43.0.2357.134 for Windows, Mac, and Linux. This release contains a critical update to Adobe Flash Player (18.0.0.209) and a fix for a full screen casting issue…"
Chrome 44.0.2403.89 released
- http://googlechromereleases.blogspot.com/2015/07/stable-channel-update_21.html
July 21, 2015 - "… announcing the promotion of Chrome 44 to the stable channel for Windows, Mac and Linux. Chrome 44.0.2403.89 contains a number of fixes and improvements… This update includes -43- security fixes…"
___
- http://www.securitytracker.com/id/1033031
CVE Reference: CVE-2015-1270, CVE-2015-1271, CVE-2015-1272, CVE-2015-1273, CVE-2015-1274, CVE-2015-1275, CVE-2015-1276, CVE-2015-1277, CVE-2015-1278, CVE-2015-1279, CVE-2015-1280, CVE-2015-1281, CVE-2015-1282, CVE-2015-1283, CVE-2015-1284, CVE-2015-1285, CVE-2015-1286, CVE-2015-1287, CVE-2015-1288, CVE-2015-1289, CVE-2015-5605
Jul 23 2015
Impact: Disclosure of authentication information, Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of system information, Modification of user information, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 44.0.2403.89 …
> http://googleprojectzero.blogspot.com/2015/07/significant-flash-exploit-mitigations_16.html
July 16, 2015 - "… if you're running Google Chrome, you can visit about:version to check the versions of various components. If you have Flash v18.0.0.209 (or newer), then you have the new goodies. If not, you can (on Windows) visit chrome://chrome to give the autoupdater a kick…"
