Google Chrome 11 (04/27/2011)
Google today fixed 27 vulnerabilities in Chrome. You can upgrade to version 11 on Windows, Mac and Linux.
The company paid a record amount of $ 16,500 to researchers who reported most of the errors, increasing the previous payment by several hundred dollars.
')
UPD. Now it's 11.0,696, 60
Under the cut details
The April 27 patch fixes 18 vulnerabilities with a “high” rating, the second highest level of danger (according to Google), six with a “medium” rating, and three with a “low” rating.
None of the vulnerabilities were critical; this category, in particular, includes errors that could allow an attacker to bypass Chrome's Sandbox. This year Google eliminated 3 critical vulnerabilities.
Five of the vulnerabilities were defined as “old labels” for errors, a term that describes the flaws in an application — in this case, in Chrome — code memory allocation. Google has fixed many such problems in the last 4 months.
Other flaws that were fixed today could have been used by attackers to spoof the contents of the address bar - a method that is commonly used for phishing in order to steal personal data or launch malicious SVG files in the browser.
Google usually blocks error databases to hide the technical details of installing a patch from other people's eyes. The company blocked public access to the list of errors for weeks or even months to give users time to update.
The award of $ 16,500 today was shared between 11 researchers , who found 17 of the fixed vulnerabilities. Permanent participant of bug reports and testing Sergey Glazunov received $ 4000, as well as another researcher who introduced himself as “kuzzcc”.
Since January, Google has spent more than $ 77,000 in bonuses to such people.
Of the five major browser makers, only Google and Mozilla - the developer of Firefox - pay off independent researchers.
Along with the security update, Google also changed the stable Chrome branch - the browser comes in three versions, stable, beta and developer - to version 11.
Chrome received an upgrade to version 11 six weeks after the last update to version 10.
Since last summer, Google has released new versions of Chrome about every six weeks. Mozilla recently decided to follow suit. Starting with Firefox 5, which is about to be launched on June 21, new versions will be released at intervals of 6-8 weeks.
Although Google listed more than 3,700 changes in Chrome 11, only one was especially underlined - the voice input feature.
“Voice input via HTML is one of many new web technologies in the browser that will help make many innovative and useful web applications, for example, Google’s voice translator, possible,” Josh Estel, software engineer, wrote in his blog on this Wednesday.
While in Chrome, a user of one country will be able to speak into the microphone of his computer, while a foreign interlocutor will hear a speech translated into his native language.
The work of Google Translate is not so perfect. The Computerworld browser recognizes several quick tests quite accurately, but in one case he gave out “Good morning, sister ship” to the phrase “Good morning, Mr. Smith”.
Note trans. "Good morning, sister ship" and "Good morning, Mr. Smith. "
Chrome 11 can be downloaded for Windows, Mac OS X and Linux from Google.
If you are reading this article via Chrome, you can update right now.
The company paid a record amount of $ 16,500 to researchers who reported most of the errors, increasing the previous payment by several hundred dollars.
')
UPD. Now it's 11.0,696, 60
Under the cut details
The April 27 patch fixes 18 vulnerabilities with a “high” rating, the second highest level of danger (according to Google), six with a “medium” rating, and three with a “low” rating.
None of the vulnerabilities were critical; this category, in particular, includes errors that could allow an attacker to bypass Chrome's Sandbox. This year Google eliminated 3 critical vulnerabilities.
Five of the vulnerabilities were defined as “old labels” for errors, a term that describes the flaws in an application — in this case, in Chrome — code memory allocation. Google has fixed many such problems in the last 4 months.
Other flaws that were fixed today could have been used by attackers to spoof the contents of the address bar - a method that is commonly used for phishing in order to steal personal data or launch malicious SVG files in the browser.
Google usually blocks error databases to hide the technical details of installing a patch from other people's eyes. The company blocked public access to the list of errors for weeks or even months to give users time to update.
The award of $ 16,500 today was shared between 11 researchers , who found 17 of the fixed vulnerabilities. Permanent participant of bug reports and testing Sergey Glazunov received $ 4000, as well as another researcher who introduced himself as “kuzzcc”.
Since January, Google has spent more than $ 77,000 in bonuses to such people.
Of the five major browser makers, only Google and Mozilla - the developer of Firefox - pay off independent researchers.
Along with the security update, Google also changed the stable Chrome branch - the browser comes in three versions, stable, beta and developer - to version 11.
Chrome received an upgrade to version 11 six weeks after the last update to version 10.
Since last summer, Google has released new versions of Chrome about every six weeks. Mozilla recently decided to follow suit. Starting with Firefox 5, which is about to be launched on June 21, new versions will be released at intervals of 6-8 weeks.
Although Google listed more than 3,700 changes in Chrome 11, only one was especially underlined - the voice input feature.
“Voice input via HTML is one of many new web technologies in the browser that will help make many innovative and useful web applications, for example, Google’s voice translator, possible,” Josh Estel, software engineer, wrote in his blog on this Wednesday.
While in Chrome, a user of one country will be able to speak into the microphone of his computer, while a foreign interlocutor will hear a speech translated into his native language.
The work of Google Translate is not so perfect. The Computerworld browser recognizes several quick tests quite accurately, but in one case he gave out “Good morning, sister ship” to the phrase “Good morning, Mr. Smith”.
Note trans. "Good morning, sister ship" and "Good morning, Mr. Smith. "
Chrome 11 can be downloaded for Windows, Mac OS X and Linux from Google.
If you are reading this article via Chrome, you can update right now.
Source: https://habr.com/ru/post/118272/
All Articles