Tech Talk

[Google Chrome multiple vulns - update available]

FYI...

Google Chrome multiple vulns - update available
- http://secunia.com/advisories/36417/2/
Release Date: 2009-08-26
Critical: Highly critical
Impact: Spoofing, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 2.x ...
Solution: Update to version 2.0.172.43.
Original Advisory:
http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2935
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2414
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2416

> http://www.google.com/chrome/
For Windows Vista/XP SP2

 

[Google Chrome v3.0.195.21 released]

FYI...

Google Chrome v3.0.195.21 released
- http://googlechromereleases.blogspot.com/2009/09/stable-channel-update.html
September 15, 2009

- http://code.google.com/p/chromium/issues/detail?id=21238
Severity: Medium...
- http://code.google.com/p/chromium/issues/detail?id=21338
Severity: High...

(Issues will be made public once a majority of users are up to date with the fix.)

Download:
- http://www.google.com/chrome/

- http://secunia.com/advisories/36770/2/
Release Date: 2009-09-16
Impact: Security Bypass, Cross Site Scripting
Where: From remote
Solution: Upgrade to version 3.0.195.21...

 

[Google Chrome vuln - v3.0.195.24 released]

FYI...

Google Chrome vuln - v3.0.195.24 released
- http://secunia.com/advisories/36913/2/
Release Date: 2009-10-01
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 3.x
Solution: Update to version 3.0.195.24...
Original Advisory: Google:
http://googlechromereleases.blogspot.com/2009/09/stable-channel-update_30.html

Download:
- http://www.google.com/chrome/

 

[Google Chrome multiple vulns - update available]

FYI...

Google Chrome multiple vulns - update available
- http://secunia.com/advisories/37273/2/
Release Date: 2009-11-06
Critical: Moderately critical
Impact: Exposure of system information, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 3.x ...
Solution: Update to version 3.0.195.32...
Original Advisory: Google:
http://googlechromereleases.blogspot.com/2009/11/stable-channel-update.html

Download:
- http://www.google.com/chrome/

 

[Google Chrome v3.0.195.33 released]

FYI...

Google Chrome v3.0.195.33 released
- http://secunia.com/advisories/37358/2/
Release Date: 2009-11-13 ...
Impact: Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 3.x ...
Solution: Update to version 3.0.195.33.
Original Advisory:
http://googlechromereleases.blogspot.com/2009/11/stable-update-fix-google-chrome-not.html

Download:
- http://www.google.com/chrome/

 

[Google Chrome v4.0.249.78 released]

FYI...

Google Chrome v4.0.249.78 released
- http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html
January 25, 2010 - "The stable channel has been updated to 4.0.249.78 for Windows, and includes the following features and security fixes (since 3.0):
    * Extensions
    * Bookmark sync
    * Enhanced developer tools
    * HTML5: Notifications, Web Database, Local Storage, WebSockets, Ruby support
    * v8 performance improvements
    * Skia performance improvements
    * Full ACID3 pass, due to re-enabled remote font support (with added defense against bugs in operating system font libraries)
    * HTTP byte range support
    * New security feature: "Strict Transport Security" support
    * Experimental new anti-reflected-XSS feature called "XSS Auditor"
Security Fixes:
Please see the Chromium security page* for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix..."
* http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

- http://secunia.com/advisories/37769/2/
Release Date: 2010-01-26
Critical: Highly critical
Impact: Security Bypass, Exposure of sensitive information, DoS, System access
Where: From remote
Software: Google Chrome 3.x
Solution: Upgrade to version 4.0.249.78...
Original Advisory: Secunia Research: http://secunia.com/secunia_research/2009-65/
Google: http://googlechromereleases.blogspot.com/2010/01/stable-channel-update_25.html

 

[Google Chrome v4.0.249.89 released]

FYI...

Google Chrome v4.0.249.89 released
- http://secunia.com/advisories/38545/
Release Date: 2010-02-11
Ciriticality: Highly critical
Impact:   Manipulation of data, Exposure of sensitive information, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x
Solution: Update to version 4.0.249.89.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html
"The stable channel has been updated to 4.0.249.89 for Windows..."

 

[Google Chrome v4.1.249.1036 released]

FYI...

Google Chrome v4.1.249.1036 released
- http://secunia.com/advisories/39029/
Release Date: 2010-03-18
Criticality level: Highly critical
Impact:   Unknown, Security Bypass, Spoofing
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x
Solution: Update to version 4.1.249.1036.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/03/stable-channel-update.html
March 17, 2010

 

[Google Chrome 4.1.249.1059 released]

FYI...

Google Chrome 4.1.249.1059 released
- http://secunia.com/advisories/39544/
Release Date: 2010-04-21
Criticality level: Highly critical
Impact: Cross Site Scripting, System access, Unknown
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x ...
Solution: Update to version 4.1.249.1059.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/04/stable-update-security-fixes.html
April 20, 2010

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

 

[Google Chrome v4.1.249.1064 released]

FYI...

Google Chrome v4.1.249.1064 released
- http://secunia.com/advisories/39651/
Release Date: 2010-04-28
Criticality level: Highly critical
Impact:   Security Bypass, System access
Where: From remote
Solution Status: Vendor Patch
Software: Google Chrome 4.x
Solution: Update to version 4.1.249.1064.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/04/stable-update-bug-and-security-fixes.html
April 27, 2010

- http://royal.pingdom.com/2010/04/08/the-modern-browser-wars-how-well-firefox-ie-and-chrome-succeed-in-getting-their-users-to-upgrade/
April 8, 2010 - "... Google has taken a very different approach to upgrades compared to other browser makers. Their mantra: Don’t ask the user to upgrade, just do it. Google Chrome handles its upgrades in a completely automated fashion, even for a completely new version of the browser... Chrome will just handle that in the background and move ahead with the upgrade..."

- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1663
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1664
- http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1665

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

 

[Google Chrome v5.0.375.55 released]

FYI...

Google Chrome v5.0.375.55 released
- http://secunia.com/advisories/39934/
Release Date: 2010-05-27
Criticality level: Moderately critical
Impact:   Unknown, Security Bypass, Spoofing
Where: From remote
... The vulnerabilities are reported in versions prior to 5.0.375.55.
Solution: Upgrade to version 5.0.375.55...
- http://googlechromereleases.blogspot.com/2010/05/stable-channel-update.html
May 25, 2010
- http://chrome.blogspot.com/2010/05/new-chrome-stable-release-welcome-mac.html

- http://securitytracker.com/alerts/2010/May/1024037.html
May 27 2010 ... prior to 5.0.375.55

Download:
- http://www.google.com/chrome/

Google Chrome Extensions
- https://chrome.google.com/extensions/list/popular

 

[Google Chrome v5.0.375.70 released]

FYI...

Google Chrome v5.0.375.70 released
- http://googlechromereleases.blogspot.com/2010/06/stable-channel-update.html
June 8, 2010 - "Google Chrome 5.0.375.70 has been released to the Stable channel on Linux, Mac, and Windows..."

- http://securitytracker.com/alerts/2010/Jun/1024088.html
Jun 11 2010

- http://www.us-cert.gov/current/#google_releases_chrome_5_01
June 9, 2010

 

[Google Chrome v5.0.375.86 released]

FYI...

Google Chrome v5.0.375.86 released
- http://secunia.com/advisories/40351/
Release Date: 2010-06-25
Criticality level: Highly critical
Impact: Unknown, Cross Site Scripting, System access
Where: From remote
Solution: Update to version 5.0.375.86.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/06/stable-channel-update_24.html

 

[Google Chrome v5.0.375.99 released]

FYI...

Google Chrome v5.0.375.99 released
- http://secunia.com/advisories/40479/
Release Date: 2010-07-05
Criticality level: Highly critical
Impact: Unknown, System access
Where: From remote ...
Solution: Update to version 5.0.375.99.
Original Advisory:
http://googlechromereleases.blogspot.com/2010/07/stable-channel-update.html
http://code.google.com/p/chromium/issues/detail?id=45983

 

[Google Chrome v5.0.375.125 released]

FYI...

Google Chrome v5.0.375.125 released
- http://secunia.com/advisories/40743/
Release Date: 2010-07-27
Criticality level: Highly critical
Impact: Unknown, Exposure of sensitive information, System access
Where: From remote
Solution: Update to version 5.0.375.125...
Original Advisory:
http://googlechromereleases.blogspot.com/2010/07/stable-channel-update_26.html