Chrome v20.0.1132.57 released
FYI...
Chrome v20.0.1132.57 released
- http://googlechromereleases.blogspot...able%20updates
July 11, 2012 - "The Stable channel has been updated to 20.0.1132.57 for Windows, Mac, Linux, and Chrome Frame. Along with below mentioned security fixes, this build contains an update to Flash player, v8 (3.10.8.20) and couple of stability/bug fixes...
High CVE-2012-2842: Use-after-free in counter handling...
High CVE-2012-2843: Use-after-free in layout height tracking...
High CVE-2012-2844: Bad object access with JavaScript in PDF..."
- https://secunia.com/advisories/49906/
Release Date: 2012-07-12
Criticality level: Highly critical
Impact: System access
Where: From remote
Solution: Update to version 20.0.1132.57.
Original Advisory: Google:
http://googlechromereleases.blogspot...el-update.html
:fear::fear:
Chrome v21.0.1180.60 released
FYI...
Chrome v21.0.1180.60 released
- https://secunia.com/advisories/50105/
Release Date: 2012-08-01
Criticality level: Highly critical
Impact: Security Bypass, System access
Where: From remote...
CVE Reference(s): CVE-2012-2846, CVE-2012-2847, CVE-2012-2848, CVE-2012-2849, CVE-2012-2850, CVE-2012-2851, CVE-2012-2852, CVE-2012-2853, CVE-2012-2854, CVE-2012-2855, CVE-2012-2856, CVE-2012-2857, CVE-2012-2858, CVE-2012-2859, CVE-2012-2860
Original Advisory:
http://googlechromereleases.blogspot...l-release.html
"... release of Chrome 21 to the Stable Channel. 21.0.1180.57 for Mac and Linux. 21.0.1180.60 for Windows and Chrome Frame..."
- http://h-online.com/-1657169
1 August 2012
:fear::spider:
Chrome v21.0.1180.75 released
FYI...
Chrome v21.0.1180.75 released
- https://secunia.com/advisories/50222/
Release Date: 2012-08-09
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2012-2862, CVE-2012-2863
... vulnerabilities are reported in versions prior to 21.0.1180.75.
Solution: Update to version 21.0.1180.75.
Original Advisory:
http://googlechromereleases.blogspot...el-update.html
Security fixes...
• [136643] [137721] [137957] High CVE-2012-2862: Use-after-free in PDF viewer...
• [136968] [137361] High CVE-2012-2863: Out-of-bounds writes in PDF viewer...
:fear::fear:
Chrome v21.0.1180.79 released
FYI...
Chrome v21.0.1180.79 released
- https://secunia.com/advisories/50286/
Release Date: 2012-08-14
Criticality level: Highly critical
Impact: System access
Where: From remote...
CVE Reference: http://web.nvd.nist.gov/view/vuln/de...=CVE-2012-1535
... vulnerability is caused due to the application bundling a vulnerable version of Adobe Flash Player.
For more information: https://secunia.com/SA50285/
Solution: Update to version 21.0.1180.79 for Mac, Linux, Windows, and Chrome Frame.
Original Advisory: Google:
http://googlechromereleases.blogspot...update_14.html
August 14, 2012 - "The Stable channel has been updated to 21.0.1180.79 for Mac, Linux, Windows and Chrome Frame. This build fixes a security issue with Adobe Flash..."
>> http://forums.spybot.info/showpost.p...6&postcount=80
:fear:
Chrome v21.0.1180.83 released
FYI...
Chrome v21.0.1180.83 released
- https://secunia.com/advisories/50356/
Release Date: 2012-08-22
Criticality level: Highly critical
Impact: Exposure of sensitive information, System access
Where: From remote
... vulnerabilities are caused due to the application bundling a vulnerable version of Adobe Flash Player.
For more information: https://secunia.com/SA50354/
Solution: Update to a fixed version...
Original Advisory:
http://googlechromereleases.blogspot...update_21.html
August 21, 2012 - "The Stable channel has been updated to 21.0.1180.81 for Linux, 21.0.1180.83 for Windows and Chrome Frame and both Beta and Stable channels have been updated to 21.0.1180.82 for Mac...
These builds also have a new version of Flash with security and other fixes..."
:fear:
Chrome v21.0.1180.89 released
FYI...
Chrome v21.0.1180.89 released
- https://secunia.com/advisories/50447/
Release Date: 2012-08-31
Criticality level: Highly critical
Impact: Unknown, Cross Site Scripting, System access
Where: From remote...
CVE Reference(s): CVE-2012-2865, CVE-2012-2866, CVE-2012-2867, CVE-2012-2868, CVE-2012-2869, CVE-2012-2870, CVE-2012-2871, CVE-2012-2872
... vulnerabilities are reported in versions prior to 21.0.1180.89.
Solution: Update to version 21.0.1180.89.
Original Advisory:
http://googlechromereleases.blogspot...update_30.html
___
- http://h-online.com/-1696236
31 August 2012
:fear:
Chrome v22.0.1229.79 released
FYI...
Chrome v22.0.1229.79 released
- https://secunia.com/advisories/50759/
Release Date: 2012-09-26
Criticality level: Highly critical
Impact: Unknown, Security Bypass, Cross Site Scripting, System access
Where: From remote ...
CVE Reference(s): CVE-2012-2874, CVE-2012-2875, CVE-2012-2876, CVE-2012-2877, CVE-2012-2878, CVE-2012-2879, CVE-2012-2880, CVE-2012-2881, CVE-2012-2882, CVE-2012-2883, CVE-2012-2884, CVE-2012-2885, CVE-2012-2886, CVE-2012-2887, CVE-2012-2888, CVE-2012-2889, CVE-2012-2890, CVE-2012-2891, CVE-2012-2892, CVE-2012-2893, CVE-2012-2894, CVE-2012-2895, CVE-2012-2896
Solution: Upgrade to version 22.0.1229.79.
Original Advisory: Google:
http://googlechromereleases.blogspot...update_25.html
___
Security fixes dominate Chrome 22
- http://h-online.com/-1717660
26 Sep 2012 - "... closes more than 40 security holes, of which one is considered to be critical and 19 are rated as 'high severity'..."
:fear:
Chrome v22.0.1229.92 released
FYI...
Chrome v22.0.1229.92 released
- https://secunia.com/advisories/50872/
Release Date: 2012-10-09
Criticality level: Highly critical
Impact: System access
Where: From remote
Solution: Update to version 22.0.1229.92.
Original Advisory: http://googlechromereleases.blogspot...el-update.html
October 8, 2012 - "... This update contains a number of stability fixes, including an issue with multiple profiles on Mac OS X 10.8.2... These builds also have a new version of Flash with security and other fixes. More information can be found here*..."
* http://helpx.adobe.com/flash-player/...l#fixed_issues
- http://www.securitytracker.com/id/1027617
CVE Reference: CVE-2012-2900, CVE-2012-5108, CVE-2012-5109, CVE-2012-5110, CVE-2012-5111
Oct 8 2012
Version(s): prior to 22.0.1229.92
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system...
Solution: The vendor has issued a fix (22.0.1229.92).
:fear:
Chrome v22.0.1229.94 released
FYI...
Chrome v22.0.1229.94 released
- https://secunia.com/advisories/50954/
Release Date: 2012-10-11
Criticality level: Highly critical
Impact: Security Bypass, System access
Where: From remote
CVE Reference: CVE-2012-5112
Solution: Update to version 22.0.1229.94.
Original Advisory: Google:
- http://googlechromereleases.blogspot...able%20updates
Oct 10, 2012
- http://www.securitytracker.com/id/1027644
CVE Reference: CVE-2012-5112
Oct 11 2012
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (22.0.1229.94).
- http://web.nvd.nist.gov/view/vuln/de...=CVE-2012-5112 - 10.0 (HIGH)
- http://web.nvd.nist.gov/view/vuln/de...=CVE-2012-5376 - 10.0 (HIGH)
:fear:
Chrome v23.0.1271.64 released
FYI...
Chrome v23.0.1271.64 released
- http://googlechromereleases.blogspot...able%20updates
Nov 6, 2012 - "... 23.0.1271.64 for Windows, Mac, Linux, and Chrome Frame. Chrome 23 contains a number of new features including GPU accelerated video decoding on Windows and easier website permissions... referenced bugs may be kept private until a majority of our users are up to date with the fix... This version also has a new Adobe Flash..."
___
- https://secunia.com/advisories/51210/
Release Date: 2012-11-07
Criticality level: Highly critical
Impact: Security Bypass, System access
Where: From remote
CVE Reference(s): CVE-2012-5115, CVE-2012-5116, CVE-2012-5117, CVE-2012-5118, CVE-2012-5119, CVE-2012-5120, CVE-2012-5121, CVE-2012-5122, CVE-2012-5123, CVE-2012-5124, CVE-2012-5125, CVE-2012-5126, CVE-2012-5127, CVE-2012-5128, CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280
Solution: Upgrade to version 23.0.1271.64.
Original Advisory: Google:
http://googlechromereleases.blogspot...a-channel.html
:fear::fear: