Google Releases New Chrome Security Update, Fixes Flash (And Other) Bugs
Posted on
by
Derek Erwin
The Google team has updated its Chrome web browser to version 22.0.1229.92 for Mac OS X and other operating systems. Security fixes include patches for one high-level vulnerability and one critical vulnerability; these builds fix five vulnerabilities overall. Encouraging scrutiny of its web browser for information about vulnerabilities, Google awarded $4,633.70 in cash to the security researchers who provided information about the security holes covered in this update.
Following are descriptions of the fixed bugs:
- CVE-2012-2900: Crash in Skia text rendering
- CVE-2012-5108: Race condition in audio device handling
- CVE-2012-5109: OOB read in ICU regex
- CVE-2012-5110: Out-of-bounds read in compositor
- CVE-2012-5111: Plug-in crash monitoring was missing for Pepper plug-ins
These builds also have a new version of Adobe Flash Player with security and other fixes to boot. Google’s Chrome browser updates automatically, or you can download Google Chrome to install the newest version.