Google ships second Chrome security update in less than a week

Chrome gets updated twice in the last week
Chrome gets updated twice in the last week

Google doled out $5,000 in bug bounties for fixes to the high-risk flaws, which all involve use-after-free issues. Another $1,000 was paid out for fixing medium-risk flaws. Google explained that many of the bugs were detected using AddressSanitizer.

The Chrome update also includes fixes to a number of other problems, including black screen on Hybrid Graphics system with GPU accelerated compositing enabled, cross-site scripting not applied to <content> element, regression rendering a div with background gradient and borders, canvas 2D line drawing bug with GPU acceleration, multiple crashes, pop-up dialog is at wrong position, HTML Canvas patterns broken if you change the transformation matrix, SSL interstitial error "proceed anyway"/"back to safety" buttons not working, and HTML5 audio not working work on some Mac computers.

In addition, Google explained in a blog that it is adding a trending view to its Chrome Web store. The view shows which apps and extensions are the most popular in the store.

Google also introduced app subcategories into the story, enabling users to dig deeper into each app category. For example, in the “Entertainment” category users can click on the “Music & Radio” subcategory to only view music-related apps.
 

What’s hot on Infosecurity Magazine?