SECURITY UPDATE: Google Releases Google Chrome Update 32.0.1700.102

Google has released Google Chrome 32.0.1700.102 for Windows, Mac, Linux and Chrome Frame to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to cause a denial of service or bypass intended security restrictions. Follow the Link for Update:

• https://www.google.com/intl/us/chrome/browser/?brand=CHNQ&utm_campaign=en&utm_source=en-et-chromeblog&utm_medium=et

Stable Channel Update

Chrome has been updated to 32.0.1700.102 for Windows, Mac, Linux and Chrome Frame.

This update has fixes for the following issues:

• Mouse Pointer disappears after exiting full-screen mode. (317496)
• Drag and drop files into Chrome may not work properly. (332579) 
• Quicktime Plugin crashes in Chrome. (308466)
• Chrome becomes unresponsive. (335248)
• Trackpad users may not be able to scroll horizontally. (332797) 
• Scrolling does not work in combo box. (334454)
• Chrome does not work with all CSS minifiers such as whitespace around a media query's `and` keyword. (333035)

Security Fixes and Rewards

This update includes 14 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

[$1000][330420] High CVE-2013-6649: Use-after-free in SVG images. Credit to Atte Kettunen of OUSPG.
[$3000][331444] High CVE-2013-6650: Memory corruption in V8. This issue was fixed in v8 version 3.22.24.16. Credit to Christian Holler.

We would also like to thank cloudfuzzer and miaubiz for working with us during the development cycle to prevent security bugs from ever reaching the stable channel. $6000 in additional rewards were issued.

Many of the above bugs were detected using AddressSanitizer.

A partial list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.