Google Chrome is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Google has announced the release of Chrome 38 (v38.0.2125.101) to the stable channel for Windows, Linux and Mac platforms.
This version contains a number of fixes and improvements as given below.
This version contains a number of fixes and improvements as given below.
Release Notes:
- A number of new apps/extension APIs
- Lots of under the hood changes for stability and performance
- Security Fixes:
- A special thanks to Jüri Aedla for a combination of V8 and IPC bugs that can lead to remote code execution outside of the sandbox.
- Out-of-bounds read in PDFium. Credit to cloudfuzzer.
- Use-after-free in Events. Credit to cloudfuzzer.
- Use-after-free in Rendering. Credit to cloudfuzzer.
- Use-after-free in DOM. Credit to cloudfuzzer.
- Type confusion in Session Management. Credit to miaubiz.
- Use-after-free in Web Workers. Credit to Collin Payne.
- Information Leak in V8. Credit to Jüri Aedla.
- Permissions bypass in Windows Sandbox. Credit to James Forshaw.
- Information Leak in XSS Auditor. Credit to Takeshi Terada.
- Out-of-bounds read in PDFium. Credit to Atte Kettunen of OUSPG.
- Release Assert in V8 bindings. Credit to Collin Payne.
- Various fixes from internal audits, fuzzing and other initiatives (Chrome 38).
- Multiple vulnerabilities in V8 fixed at the tip of the 3.28 branch (currently 3.28.71.15).
No comments:
Post a Comment