The stable channel has been updated to 9.0.597.84 for all platforms. Details about the features included in this release can be found on the Google Chrome Blog, in addition this release contains the following security fixes.
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
Special thanks to thecommunity, for playing so much of the game “Z-Type” that they uncovered a Chromium audio bug -- see below!
1. [Mac only] [42989] Low Minor sandbox leak via stat(). Credit to Daniel Cheng of the Chromium development community.
2. [$1000] [55831] High Use-after-free in image loading. Credit to Aki Helin of OUSPG.
3. [59081] Low Apply some restrictions to cross-origin drag + drop. Credit to Google Chrome Security Team (SkyLined) and the Google Security Team (Michal Zalewski, David Bloom).
4. [62791] Low Browser crash with extension with missing key. Credit to Brian Kirchoff.
5. [$1000] [64051] High Crashing when printing in PDF event handler. Credit to Aki Helin of OUSPG.
6. [65669] Low Handle merging of autofill profiles more gracefully. Credit to Google Chrome Security Team (Inferno).
7. [Mac only] [66931] Low Work around a crash in the Mac OS 10.5 SSL libraries. Credit to Dan Morrison.
8. [68244] Low Browser crash with bad volume setting. Credit to Matthew Heidermann.
9. [69195] Critical Race condition in audio handling. Credit to the gamers of Reddit!
In addition, we would like to thank Aki Helin, Sergey Glazunov, Ben Hawkes of the Google Security Team, Benoit Jacob, Simon Fraser and miaubiz for reporting bugs to us during the development cycle, so that they never affected the stable channel. Various rewards were issued for this help.
|
|
