Google Chrome updates

[AplusWebMaster]

FYI...

Chrome v24.0.1312.70 released
- https://secunia.com/advisories/52163/
Release Date: 2013-02-12
Criticality level: Highly critical
Impact: Exposure of sensitive information, System access
Where: From remote...
For more information: https://secunia.com/SA52166/
Solution: Update to version 24.0.1312.70.
Original Advisory:
- http://googlechromereleases.blogspot...update_12.html

[AplusWebMaster]

FYI...

Chrome v25.0.1364.97 released
- https://secunia.com/advisories/52320/
Release Date: 2013-02-22
Criticality level: Highly critical
Impact: Unknown, Security Bypass, System access
Where: From remote
CVE Reference(s): CVE-2013-0879, CVE-2013-0880, CVE-2013-0881, CVE-2013-0882, CVE-2013-0883, CVE-2013-0884, CVE-2013-0885, CVE-2013-0886, CVE-2013-0887, CVE-2013-0888, CVE-2013-0889, CVE-2013-0890, CVE-2013-0891, CVE-2013-0892, CVE-2013-0893, CVE-2013-0894, CVE-2013-0895, CVE-2013-0896, CVE-2013-0897, CVE-2013-0898, CVE-2013-0899, CVE-2013-0900
... vulnerabilities are reported in versions prior to 25.0.1364.97 for Windows and Linux and prior to 25.0.1364.99 for Mac.
Solution: Upgrade to version 25.0.1364.97 for Windows and Linux and 25.0.1364.99 for Mac.
Original Advisory:
- http://googlechromereleases.blogspot...update_21.html
Feb 21, 2013 - "... Chrome 25.0.1364.97 for Windows and Linux, and 25.0.1364.99 for Mac contain a number of new items including:
- Improvements in managing and securing your extensions
- Better support for HTML5 time/date inputs
- JavaScript Web Speech API support
- Better WebGL error handling
- And lots of other features for developers
Security fixes... We’ve also resolved a high severity security issue by disabling MathML in this release. The WebKit MathML implementation isn’t quite ready for prime time yet but we are excited to enable it again in a future release once the security issues have been addressed. Many... bugs were detected using AddressSanitizer..."

[AplusWebMaster]

FYI...

Chrome v25.0.1364.152 released
- http://googlechromereleases.blogspot...-update_4.html
March 4, 2013 - "The Stable channel has been updated to 25.0.1364.152 for Windows and Linux. Note: these release notes also apply to the same version for Mac that was released last Friday. This release contains security and stability improvements along with a number of bug fixes... the referenced bugs may be kept private until a majority of our users are up to date with the fix..."

- https://secunia.com/advisories/52454/
Release Date: 2013-03-05
Criticality level: Highly critical
Impact: Unknown, System access
Where: From remote ...
CVE Reference(s): CVE-2013-0902, CVE-2013-0903, CVE-2013-0904, CVE-2013-0905, CVE-2013-0906, CVE-2013-0907, CVE-2013-0908, CVE-2013-0909, CVE-2013-0910, CVE-2013-0911
... vulnerabilities are reported in versions prior to 25.0.1364.152.
Solution: Update to version 25.0.1364.152.

[AplusWebMaster]

FYI...

Chrome v25.0.1364.160 released
- https://secunia.com/advisories/52534/
Release Date: 2013-03-08
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference: CVE-2013-0912
... vulnerability is reported in versions prior to 25.0.1364.160.
Solution: Update to version 25.0.1364.160.
Original Advisory: Chrome:
http://googlechromereleases.blogspot...-update_7.html
MWR InfoSecurity:
http://labs.mwrinfosecurity.com/blog...nsecwest-2013/

[AplusWebMaster]

FYI...

Chrome v25.0.1364.172 released
- https://secunia.com/advisories/52591/
Release Date: 2013-03-12
Criticality level: Highly critical
Impact: System access
Where: From remote
CVE Reference(s): CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375
For more information: https://secunia.com/SA52590/
... vulnerabilities are reported in versions prior to 25.0.1364.172.
Solution: Update to version 25.0.1364.172.
Original Advisory:
http://googlechromereleases.blogspot...update_12.html

[AplusWebMaster]

FYI...

Chrome v25.0.1364.173 released
- http://www.securitytracker.com/id/1028320
CVE Reference:
- https://web.nvd.nist.gov/view/vuln/d...=CVE-2013-0913 - 7.2 (HIGH)
- https://web.nvd.nist.gov/view/vuln/d...=CVE-2013-0915 - 10.0 (HIGH)
Mar 19 2013
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 25.0.1364.173...
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (25.0.1364.173)...
- http://googlechromereleases.blogspot...ome-os_15.html
... Release highlights:
- Updated Flash to 11.6.602.180, which resolves a bug where some DRM video content would be unable to play (e.g.: Amazon Prime Video).
- Fixed an issue with Chromebook Pixel and Acer C7 systems freezing while playing videos.
- Fixed an issue with Acer C7 systems freezing after resume...

[AplusWebMaster]

FYI...

Chrome v26.0.1410.43 released
- https://secunia.com/advisories/52761/
Release Date: 2013-03-27
Criticality level: Highly critical
Impact: Unknown, Security Bypass, System access
Where: From remote
CVE Reference(s): CVE-2013-0916, CVE-2013-0917, CVE-2013-0918, CVE-2013-0919, CVE-2013-0920, CVE-2013-0921, CVE-2013-0922, CVE-2013-0923, CVE-2013-0924, CVE-2013-0925, CVE-2013-0926
... vulnerabilities are reported in versions prior to 26.0.1410.43.
Solution: Upgrade to version 26.0.1410.43.
Original Advisory:
- http://googlechromereleases.blogspot...update_26.html

- http://h-online.com/-1831304
27 March 2013

[AplusWebMaster]

FYI...

Chrome/Flash v11.8.800.170 updated
- http://googlechromereleases.blogspot...er-update.html
September 10, 2013 - "Flash Player Update: We are updating Flash Player to version 11.8.800.170 on Windows and Mac via our component update system (i.e. there will -not- be a Chrome update)..."

[AplusWebMaster]

FYI...

Chrome v29.0.1547.57 released
- https://secunia.com/advisories/54479/
Release Date: 2013-08-21
Criticality: Highly Critical
Where: From remote
Impact: Unknown, Exposure of sensitive information, System access
CVE Reference(s): CVE-2013-2887, CVE-2013-2900, CVE-2013-2901, CVE-2013-2902, CVE-2013-2903, CVE-2013-2904, CVE-2013-2905
... vulnerabilities are reported in versions prior to 29.0.1547.57.
Solution: Upgrade to version 29.0.1547.57.
Original Advisory:
http://googlechromereleases.blogspot...el-update.html
"... This update includes 25 security fixes..."

- http://www.securitytracker.com/id/1028942
CVE Reference: CVE-2013-2887, CVE-2013-2900, CVE-2013-2901, CVE-2013-2902, CVE-2013-2903, CVE-2013-2904, CVE-2013-2905
Aug 22 2013
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 29.0.1547.57...

[AplusWebMaster]

FYI...

Chrome 33.0.1750.117 released
- https://secunia.com/advisories/57028/
Release Date: 2014-02-21
Criticality: Highly Critical
Where: From remote
Impact: Unknown, Exposure of sensitive information, System access
CVE Reference(s): CVE-2013-6652, CVE-2013-6653, CVE-2013-6654, CVE-2013-6655, CVE-2013-6656, CVE-2013-6657, CVE-2013-6658, CVE-2013-6659, CVE-2013-6660, CVE-2013-6661
... vulnerabilities are reported in versions prior to 33.0.1750.117.
Solution: Upgrade to version 33.0.1750.117.
Original Advisory:
- http://googlechromereleases.blogspot...update_20.html
"... This update includes -28- security fixes..."

- http://www.securitytracker.com/id/1029813
Feb 22 2014
Impact: Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 33.0.1750.117 ...
Impact: A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution: The vendor has issued a fix (33.0.1750.117)...