===================================================================== CERT-Renater Note d'Information No. 2010/VULN381 _____________________________________________________________________ DATE : 27/09/2010 HARDWARE PLATFORM(S) : / OPERATING SYSTEM(S) : Systems running Google Chrome versions prior to 6.0.472.62. ====================================================================== http://googlechromereleases.blogspot.com/2010/09/stable-beta-channel-updates_17.html ______________________________________________________________________ Stable, Beta Channel Updates Friday, September 17, 2010 | 14:31 Labels: Beta updates, Stable updates Google Chrome has been updated to 6.0.472.62 for Windows, Linux and Mac on the Stable channel. In addition, all of the above plus Chrome Frame have been updated on the Beta channel. Along with the security fixes listed below, this version includes an updated version of the Flash Plugin with a fix for a security vulnerability. Security fixes and rewards Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. * [$500] [55114] High Bad cast with malformed SVG. Credit to wushi of team 509. * [55119] Critical Buffer mismanagement in the SPDY protocol. Credit to Ron Ten-Hove of Google. * [$1000] [55350] High Cross-origin property pollution. Credit to Stefano Di Paola of MindedSecurity. More details about additional changes are available in the SVN revision log. If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel - find out how. Jason Kersey Google Chrome ====================================================================== ========================================================= Les serveurs de référence du CERT-Renater http://www.urec.fr/securite http://www.cru.fr/securite http://www.renater.fr ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 151 bd de l'Hopital | fax : 01-53-94-20-41 + + 75013 Paris | email: certsvp@renater.fr + =========================================================