Google Chrome Stable Security Update April 2011

Google has just released an update for the Google Chrome stable channel that updates the version of the web browser to 10.0.658.205 for all supported operating systems (which means Microsoft Windows, Apple Macintosh, Linux and Chrome Frame). The release is a security update that fixes vulnerabilities in all versions of the web browser. Most notably, it includes an early fix for the Adobe Flash vulnerability that has been confirmed by Adobe earlier this week.

Three additional security vulnerabilities are fixed in the latest Google Chrome Stable version. One of the fixed issues is only affecting Chrome on Windows, while the remaining are affected all versions of the Chrome browser.

• [Windows only] [70070] Critical CVE-2011-1300: Off-by-three in GPU process.
• [75629] Critical CVE-2011-1301: Use-after-free in the GPU process.
• [78524] Critical CVE-2011-1302: Heap overflow in the GPU process.

All three vulnerabilities have received a critical rating, the highest possible rating. The Adobe Flash vulnerability was rated critical by Adobe, which means four critical vulnerabilities have been fixed in total in the latest version of Google Chrome.

Google Chrome users can download the latest version of the web browser from the official Google Chrome download page, or with an in-browser update.

Google Chrome should recognize the update automatically and apply it on the next restart of the browser. They can initiate the update check manually with a click on Tools > About Google Chrome.

This queries the Google Update server to see if a new version of the installed Chrome browser is available. Updates that are found by the check are downloaded automatically, and the only thing left to do is to restart the browser to apply the update that secures the Internet browser from those vulnerabilities.

Adobe confirmed that a general update for the Flash vulnerability will follow tomorrow.

Advertisement