mdfprize.blogg.se

Various fixes from internal audits, fuzzing and other initiatives

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.Īs usual, our ongoing internal security work was responsible for a wide range of fixes: Low CVE-2023-5473: Use after free in Cast. Low CVE-2023-5486: Inappropriate implementation in Input. Reported by Bahaa Naamneh of Crosspoint Labs on Low CVE-2023-5477: Inappropriate implementation in Installer. Low CVE-2023-5478: Inappropriate implementation in Autofill. Low CVE-2023-5485: Inappropriate implementation in Autofill. Medium CVE-2023-5479: Inappropriate implementation in Extensions API. Medium CVE-2023-5474: Heap buffer overflow in PDF. Medium CVE-2023-5476: Use after free in Blink History. Medium CVE-2023-5481: Inappropriate implementation in Downloads. Medium CVE-2023-5483: Inappropriate implementation in Intents. Medium CVE-2023-5475: Inappropriate implementation in DevTools. Medium CVE-2023-5484: Inappropriate implementation in Navigation. Medium CVE-2023-5487: Inappropriate implementation in Fullscreen. Critical CVE-2023-5218: Use after free in Site Isolation. Please see the Chrome Security Page for more information.

Below, we highlight fixes that were contributed by external researchers. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed. Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. The Extended Stable channel has been updated to 1.71 for Windows and 1.70 for Mac, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. The Stable channel has been updated to 1.70 for Mac and Linux and 1.70/.71 for Windows, which will roll out over the coming days/weeks.