Chrome 14 update brings Flash 11, closes security holes

Google has released version 14.0.835.202 of Chrome, a maintenance and security update for all supported platforms. This stable channel update includes the new Flash Player 11 release and addresses a total of nine vulnerabilities.

Rated as 'critical' by Google, a memory corruption problem has been fixed in the shader translator. Other holes closed include eight 'high-risk' bugs ranging from a use-after-free error in text line box handling and stale fonts in text handling, to a cross-origin problem, lifetime and threading issues in audio node handling, and use-after-free and memory corruption exploits in V8, the browser's JavaScript engine. However, Google's fix for the SSL/TLS vulnerability has yet to make it from the development version to the stable branch.

As part of its Chromium Security Reward program, Google paid out a total of $10,000 to security researchers for reporting these vulnerabilities. Further details of the vulnerabilities are being withheld until "a majority of users are up-to-date with the fix".

Further details about the update, including a link to the full SVN revision log, can be found in a post on the Google Chrome Releases blog. Chrome 14.0.835.202 is available to download for Windows, Mac OS X and Linux from google.com/chrome. Users who currently have Chrome installed can use the built-in update function by clicking Tools, selecting About Google Chrome and clicking the Update button.

See also:

• Chrome updates to repair Microsoft false alarm damage, a report from The H.
• Chrome 14 arrives with native code and web audio, a report from The H.

(crve)