Two bugs fixed in Chrome 2 and a big flaw fixed in Chrome 3 dev version.
Google has issued three patches for various versions of Chrome this week. On Tuesday, Google fixed two bugs in Chrome version 2, one with a severity rating of “high” and the other with a rating of “medium.”
The hole rated high is a memory corruption issue in WebKit’s handling of recursion in certain DOM event handlers. Users would have to visit a malicious website but if an attack was successful, the hacker might be able to run arbitrary code within Google Chrome. The hole rated medium fixes an issue that existed in WebKit’s handling of drag events. If content is dragged over a maliciously crafted web page, an attacker may be able to read it. Chrome users should verify that they have the latest, patched version of the browser: version 2.0.172.31.
Today, the Chrome team fixed a problem in its developer version of the upcoming Chrome 3. While Google does warn users that developer versions of the browser are always unstable, it also tries to quickly fix really big issues. The team released a version of Chrome 3 yesterday in which the Windows version would crash every time a user attempted to use the wrench or page menus. Today’s release fixes that problem.
Since the browser would crash, those that already installed yesterday’s update can’t get to the About Google Chrome page to force an update. But no worries. Chrome will automatically update to the latest versions in about a five-hour time span. If you can’t wait, or the update didn’t occur on your system, you can uninstall the browser and then reinstall the fixed version from https://www.google.com/chrome/eula.html?extra=devchannel.
The new Linux and Mac dev versions of Chrome 3 were not affected.
Like this post? Visit the Google Subnet home page for more news, blogs and podcasts. Sign up for the weekly Google newsletter. (Click on News/Google News Alert.) More blog posts from Google Subnet:
- A demo of Google’s Apps Sync: links Outlook to Gmail
- PC makers show off two more netbooks running Android
- Wave steals the show at Google I/O 2009
- Google adds scripting to Apps
- Chrome 2.0 adds speed, not much else
- Google’s days are numbered, or are they?
- Lose the beta crutch, Google, win the enterprise
Subscribe to all Google Subnet bloggers
Follow Google Subnet on Twitter
