Comment 3 for bug 1132568

Revision history for this message
ilf (ilf) wrote : Re: Please update to 25.0.1364.152

And another release: http://googlechromereleases.blogspot.de/2013/03/stable-channel-update_4.html

The new CVEs:

    [$1000] [176882] High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva.
    [$1000] [176252] High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to “chromium.khalil”.
    [$2000] [172926] [172331] High CVE-2013-0904: Memory corruption in Web Audio. Credit to Atte Kettunen of OUSPG.
    [$1000] [168982] High CVE-2013-0905: Use-after-free with SVG animations. Credit to Atte Kettunen of OUSPG.
    [174895] High CVE-2013-0906: Memory corruption in Indexed DB. Credit to Google Chrome Security Team (Jüri Aedla).
    [174150] Medium CVE-2013-0907: Race condition in media thread handling. Credit to Andrew Scherkus of the Chromium development community.
    [174059] Medium CVE-2013-0908: Incorrect handling of bindings for extension processes.
    [173906] Low CVE-2013-0909: Referer leakage with XSS Auditor. Credit to Egor Homakov.
    [172573] Medium CVE-2013-0910: Mediate renderer -> browser plug-in loads more strictly. Credit to Google Chrome Security Team (Chris Evans).
    [172264] High CVE-2013-0911: Possible path traversal in database handling. Credit to Google Chrome Security Team (Jüri Aedla).