April 28, 2011 at 01:48Google Chrome 11 (04/27/2011)
- Transfer
Google today fixed 27 vulnerabilities in Chrome. You can upgrade to version 11 on Windows, Mac, and Linux.
The company paid a record $ 16,500 to researchers who reported most of the mistakes by increasing the size of the previous payout by several hundred dollars.
UPD Now it’s 11,0,696, 60
Under cut details.
The patch of April 27 fixes 18 vulnerabilities with a rating of “high”, second in terms of danger (according to Google), six with a rating of “medium”, and three with a “low”.
None of the vulnerabilities were critical, this category, in particular, includes errors that could allow an attacker to bypass the Chrome Sandbox. Over the past year, Google has fixed 3 critical vulnerabilities.
Five of the vulnerabilities were identified as “old shortcuts” for bugs, a term that describes flaws in an application — in this case, in Chrome — code memory allocation. Google has fixed many of these issues in the last 4 months.
Other deficiencies that were resolved today could be used by cybercriminals to spoof the contents of the address bar - a method that is usually used for phishing to steal personal data or launch malicious SVG files in a browser.
Usually Google blocks error databases to hide the technical details of installing a particular patch from prying eyes. The company blocked public access to the error list for weeks or even months to give users time to update.
Reward $ 16,500 todaydivided between 11 researchers who found 17 of the fixed vulnerabilities. A regular participant in bug reports and testing, Sergey Glazunov received $ 4000, as well as another researcher who introduced himself as “kuzzcc”.
Since January, Google has spent more than $ 77,000 on bonuses to such people.
Of the five major browser makers, only Google and Mozilla, the developer of Firefox, make payments to independent researchers.
Along with the security update, Google also changed the stable Chrome branch - the browser comes in three versions, stable, beta and development - to version 11.
Chrome received an update to version 11 six weeks after the last update to version 10.
Since last summer, Google has been releasing new versions of Chrome about every six weeks. Mozilla recently decided to follow suit. Starting with Firefox 5, which is about to launch on June 21, new versions will be released at intervals of 6-8 weeks.
Although Google listed over 3,700 changes to Chrome 11, only one was particularly emphasized - the voice input feature.
“HTML voice input is one of the many new web technologies in the browser that will help make many innovative and useful web applications, such as Google voice translator, possible,” wrote programming engineer Josh Estelle on this blog post.
While in Chrome, a user of one country will be able to speak into the microphone of his computer, and the interlocutor-foreigner will hear the speech translated into his native language.
The work of Google Translate is not so flawless. The computerworld recognizes the computerwith some quick tests quite accurately, but in one case it gave “Good morning, sister ship” to the phrase “Good morning, Mr. Smith.”
Note perev. "Good morning, sister ship" and "Good morning, Mr. Smith. "
Chrome 11 can be downloaded for Windows, Mac OS X, and Linux from the Google website.
If you are reading this article through Chrome, you can update right now.
The company paid a record $ 16,500 to researchers who reported most of the mistakes by increasing the size of the previous payout by several hundred dollars.
UPD Now it’s 11,0,696, 60
Under cut details.
The patch of April 27 fixes 18 vulnerabilities with a rating of “high”, second in terms of danger (according to Google), six with a rating of “medium”, and three with a “low”.
None of the vulnerabilities were critical, this category, in particular, includes errors that could allow an attacker to bypass the Chrome Sandbox. Over the past year, Google has fixed 3 critical vulnerabilities.
Five of the vulnerabilities were identified as “old shortcuts” for bugs, a term that describes flaws in an application — in this case, in Chrome — code memory allocation. Google has fixed many of these issues in the last 4 months.
Other deficiencies that were resolved today could be used by cybercriminals to spoof the contents of the address bar - a method that is usually used for phishing to steal personal data or launch malicious SVG files in a browser.
Usually Google blocks error databases to hide the technical details of installing a particular patch from prying eyes. The company blocked public access to the error list for weeks or even months to give users time to update.
Reward $ 16,500 todaydivided between 11 researchers who found 17 of the fixed vulnerabilities. A regular participant in bug reports and testing, Sergey Glazunov received $ 4000, as well as another researcher who introduced himself as “kuzzcc”.
Since January, Google has spent more than $ 77,000 on bonuses to such people.
Of the five major browser makers, only Google and Mozilla, the developer of Firefox, make payments to independent researchers.
Along with the security update, Google also changed the stable Chrome branch - the browser comes in three versions, stable, beta and development - to version 11.
Chrome received an update to version 11 six weeks after the last update to version 10.
Since last summer, Google has been releasing new versions of Chrome about every six weeks. Mozilla recently decided to follow suit. Starting with Firefox 5, which is about to launch on June 21, new versions will be released at intervals of 6-8 weeks.
Although Google listed over 3,700 changes to Chrome 11, only one was particularly emphasized - the voice input feature.
“HTML voice input is one of the many new web technologies in the browser that will help make many innovative and useful web applications, such as Google voice translator, possible,” wrote programming engineer Josh Estelle on this blog post.
While in Chrome, a user of one country will be able to speak into the microphone of his computer, and the interlocutor-foreigner will hear the speech translated into his native language.
The work of Google Translate is not so flawless. The computerworld recognizes the computerwith some quick tests quite accurately, but in one case it gave “Good morning, sister ship” to the phrase “Good morning, Mr. Smith.”
Note perev. "Good morning, sister ship" and "Good morning, Mr. Smith. "
Chrome 11 can be downloaded for Windows, Mac OS X, and Linux from the Google website.
If you are reading this article through Chrome, you can update right now.
