Chrome v25.0.1364.173 released
- http://www.securitytracker.com/id/1028320
CVE Reference:
- https://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2013-0913 - 7.2 (HIGH)
- https://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2013-0915 - 10.0 (HIGH)
Mar 19 2013
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 25.0.1364.173…
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (25.0.1364.173)…
- http://googlechromereleases.blogspot.com/2…rome-os_15.html
… Release highlights:
- Updated Flash to 11.6.602.180, which resolves a bug where some DRM video content would be unable to play (e.g.: Amazon Prime Video).
- Fixed an issue with Chromebook Pixel and Acer C7 systems freezing while playing videos.
- Fixed an issue with Acer C7 systems freezing after resume…
Chrome v27.0.1453.93 released
- http://googlechromereleases.blogspot.ca/20…el-release.html
May 21, 2013 - "Chrome 27.0.1453.93 for Windows, Mac, Linux, and Chrome Frame contains a number of new items… ongoing internal security work was as usual responsible for a wide range of fixes…"
- https://secunia.com/advisories/53430/
Release Date: 2013-05-22
Criticality level: Highly critical
Impact: Unknown, Cross Site Scripting, Exposure of sensitive information, System access
Where: From remote …
CVE Reference(s): CVE-2013-2728, CVE-2013-2836, CVE-2013-2837, CVE-2013-2839, CVE-2013-2840, CVE-2013-2841, CVE-2013-2842, CVE-2013-2843, CVE-2013-2844, CVE-2013-2845, CVE-2013-2846, CVE-2013-2847, CVE-2013-2848, CVE-2013-2849, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335
… For more information: https://secunia.com/SA53419/
Solution: Update to version 27.0.1453.93.
Chrome v27.0.1453.110 released
- https://secunia.com/advisories/53681/
Release Date: 2013-06-05
Criticality level: Highly critical
Impact: Unknown, System access
Where: From remote
CVE Reference(s): CVE-2013-2854, CVE-2013-2855, CVE-2013-2856, CVE-2013-2857, CVE-2013-2858, CVE-2013-2859, CVE-2013-2860, CVE-2013-2861, CVE-2013-2862, CVE-2013-2863, CVE-2013-2864, CVE-2013-2865
… vulnerabilities are reported in versions prior to 27.0.1453.110.
Solution: Update to version 27.0.1453.110.
Original Advisory:
- http://googlechromereleases.blogspot.com/s…table%20updates
June 4, 2013 - "… updated to 27.0.1453.110 for Windows, Macintosh, Linux and Chrome Frame platforms…"
Chrome/Flash update to 11.7.700.225
- http://googlechromereleases.blogspot.com/2…le-channel.html
June 11, 2013 - "Flash Player Update for Stable Channel / We are currently updating Flash Player to 11.7.700.225* for Windows and Mac to all Stable channel (Chrome 27) users."
Chrome v27.0.1453.116 released
- https://secunia.com/advisories/53867/
Release Date: 2013-06-19
Impact: Cross Site Scripting
Where: From remote …
CVE Reference: https://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2013-2866
… vulnerability is caused due to an error when handling opacity of embedded Flash elements and can be exploited to e.g. gain access to the system's camera and microphone by tricking the user into clicking Flash settings frame disguised as a normal graphical element. The vulnerability is reported in versions prior to 27.0.1453.116.
Solution: Update to version 27.0.1453.116.
Original Advisory: http://googlechromereleases.blogspot.com/2…-update_18.html
Chrome v28.0.1500.71 released
- https://secunia.com/advisories/54017/
Release Date: 2013-07-09
Criticality: Highly Critical
CVE Reference(s): CVE-2013-2853, CVE-2013-2868, CVE-2013-2869, CVE-2013-2870, CVE-2013-2871, CVE-2013-2873, CVE-2013-2874, CVE-2013-2875, CVE-2013-2876, CVE-2013-2878, CVE-2013-2879, CVE-2013-2880
… vulnerabilities are reported in versions prior to 28.0.1500.71.
Solution: Upgrade to version 28.0.1500.71.
Original Advisory: http://googlechromereleases.blogspot.dk/20…nel-update.html
"… We are separately updating users to Flash Player 11.8.800.97 via our component updater. The Stable channel has been updated to 28.0.1500.71 for Windows, Macintosh and Chrome Frame platforms…"
___
Chrome 28.0.1500.95 released
- https://secunia.com/advisories/54325/
Release Date: 2013-07-31
Criticality: Highly Critical
Where: From remote
Impact: Unknown, Security Bypass, System access
CVE Reference(s): CVE-2013-2881, CVE-2013-2882, CVE-2013-2883, CVE-2013-2884, CVE-2013-2885,
CVE-2013-2886
… vulnerabilities are reported in versions prior to 28.0.1500.95.
Solution: Update to version 28.0.1500.95.
Original Advisory: http://googlechromereleases.blogspot.dk/20…-update_30.html
Chrome v29.0.1547.57 released
- https://secunia.com/advisories/54479/
Release Date: 2013-08-21
Criticality: Highly Critical
Where: From remote
Impact: Unknown, Exposure of sensitive information, System access
CVE Reference(s): CVE-2013-2887, CVE-2013-2900, CVE-2013-2901, CVE-2013-2902, CVE-2013-2903, CVE-2013-2904, CVE-2013-2905
… vulnerabilities are reported in versions prior to 29.0.1547.57.
Solution: Upgrade to version 29.0.1547.57.
Original Advisory: http://googlechromereleases.blogspot.com/2…nel-update.html
"… This update includes 25 security fixes…"
- http://www.securitytracker.com/id/1028942
CVE Reference: CVE-2013-2887, CVE-2013-2900, CVE-2013-2901, CVE-2013-2902, CVE-2013-2903, CVE-2013-2904, CVE-2013-2905
Aug 22 2013
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 29.0.1547.57…
Chrome/Flash v11.8.800.170 updated
- http://googlechromereleases.blogspot.com/2…yer-update.html
September 10, 2013 - "Flash Player Update: We are updating Flash Player to version 11.8.800.170 on Windows and Mac via our component update system (i.e. there will -not- be a Chrome update)…"
Chrome 30.0.1599.66 released
- http://googlechromereleases.blogspot.com/2…nel-update.html
Oct 1, 2013 - "… Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including:
Easier searching by image
A number of new apps/extension APIs
Lots of under the hood changes for stability and performance …
… This update includes -50- security fixes…"
- https://secunia.com/advisories/55087/
Release Date: 2013-10-02
Criticality: Highly Critical
Where: From remote
Impact: Spoofing, Unknown, System access…
CVE Reference(s): CVE-2013-2906, CVE-2013-2907, CVE-2013-2908, CVE-2013-2909, CVE-2013-2910, CVE-2013-2911, CVE-2013-2912, CVE-2013-2913, CVE-2013-2914, CVE-2013-2915, CVE-2013-2916, CVE-2013-2917, CVE-2013-2918, CVE-2013-2919, CVE-2013-2920, CVE-2013-2921, CVE-2013-2922, CVE-2013-2923, CVE-2013-2924
… vulnerabilities are reported in versions prior to 30.0.1599.66.
Solution: Upgrade to version 30.0.1599.66.
Original Advisory: http://googlechromereleases.blogspot.com/2…nel-update.html
Chrome v30.0.1599.101 released
- https://secunia.com/advisories/55269/
Release Date: 2013-10-16
Criticality: Highly Critical
Where: From remote
Impact: Unknown, System access…
CVE Reference(s): CVE-2013-2925, CVE-2013-2926, CVE-2013-2927, CVE-2013-2928
… vulnerabilities are reported in versions prior to 30.0.1599.101.
Solution: Update to version 30.0.1599.101.
Original Advisory: http://googlechromereleases.blogspot.com/2…-update_15.html
Oct 15, 2013 - "… This update includes 5 security fixes…"
Chrome v31.0.1650.48 released
- http://googlechromereleases.blogspot.com/2013/11/stable-channel-update.html
Nov 12, 2013 - "Chrome has been updated to 31.0.1650.48 for Windows, Mac, Linux and Chrome Frame. Flash Player has been updated to 11.9.900.152, which is included w/ this release… This update includes 25 security fixes…"
___
- http://www.securitytracker.com/id/1029330
CVE Reference: CVE-2013-2931, CVE-2013-6621, CVE-2013-6622, CVE-2013-6623, CVE-2013-6624, CVE-2013-6625, CVE-2013-6626, CVE-2013-6627, CVE-2013-6628, CVE-2013-6629, CVE-2013-6630, CVE-2013-6631
Nov 12 2013
Impact: Execution of arbitrary code via network, Modification of system information, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 31.0.1650.48 …
