Google Chrome 75 Stable
O Chrome 75.0.3770.80 contém várias correções e melhorias.
Correções de segurança
No total a versão 75 recebeu 42 correções segundo o anúncio oficial.
"Nota: O acesso a detalhes de bugs e links
pode ser mantido restrito até que a maioria
dos usuários seja atualizada com uma correção.
Também manteremos restrições se o bug existir
em uma biblioteca de terceiros da qual outros
projetos dependem, mas ainda não foram corrigidos.
Esta atualização inclui 42 correções de segurança.
Abaixo, destacamos correções que foram
contribuídas por pesquisadores externos."
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
This update includes 42 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.
[$5000][956597] High CVE-2019-5828: Use after free in ServiceWorker. Reported by leecraso of Beihang University and Guang Gong of Alpha Team, Qihoo 360 on 2019-04-25
[$500][958533] High CVE-2019-5829: Use after free in Download Manager. Reported by Lucas Pinheiro, Microsoft Browser Vulnerability Research on 2019-05-01
[$TBD][665766] Medium CVE-2019-5830: Incorrectly credentialed requests in CORS. Reported by Andrew Krasichkov, Yandex Security Team on 2016-11-16
[$TBD][950328] Medium CVE-2019-5831: Incorrect map processing in V8. Reported by yngwei(JiaWei, Yin) of IIE Varas and sakura of Tecent Xuanwu Lab on 2019-04-07
[$TBD][959390] Medium CVE-2019-5832: Incorrect CORS handling in XHR. Reported by Sergey Shekyan (Shape Security) on 2019-05-03
[$N/A][945067] Medium CVE-2019-5833: Inconsistent security UI placement. Reported by Khalil Zhani on 2019-03-23
[$N/A][962368] Medium CVE-2019-5834: URL spoof in Omnibox on iOS. Reported by Khalil Zhani on 2019-05-13
[$1000][939239] Medium CVE-2019-5835: Out of bounds read in Swiftshader. Reported by Wenxiang Qian of Tencent Blade Team on 2019-03-07
[$1000][947342] Medium CVE-2019-5836: Heap buffer overflow in Angle. Reported by Omair on 2019-03-29
[$500][918293] Medium CVE-2019-5837: Cross-origin resources size disclosure in Appcache . Reported by Adam Iwaniuk on 2018-12-30
[$500][893087] Low CVE-2019-5838: Overly permissive tab access in Extensions. Reported by David Erceg on 2018-10-08
[$500][925614] Low CVE-2019-5839: Incorrect handling of certain code points in Blink. Reported by Masato Kinugawa on 2019-01-26
[$N/A][951782] Low CVE-2019-5840: Popup blocker bypass. Reported by Eliya Stein, Jerome Dangu on 2019-04-11
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
As usual, our ongoing internal security work was responsible for a wide range of fixes:
[970244] Various fixes from internal audits, fuzzing and other initiatives
Fonte
Novidades
O Google Chrome 75 vem com varias novidades, confira abaixo.
FEATURES IN THIS RELEASE:
Blink
IFrame execution/freezing feature policy
RTCIceTransport
stale-while-revalidate
Blink>Accessibility
Alternative Text in CSS Generated Content
Blink>Animation
Animation constructor
AnimationEffect and KeyframeEffect (excluding getKeyframes/setKeyframes & composite/iterationComposite)
Blink>CSS
Remove unimplemented -webkit-appearance keywords
Blink>Canvas
Low latency canvas contexts with desynchronized
Blink>GetUserMedia
MediaStreamTrack.getCapabilities() support for audio device-related constrainable properties.
Blink>JavaScript>Language
Numeric Separators
Blink>JavaScript>WebAssembly
WebAssembly Bulk Memory Operations
Blink>Layout
overflow: -webkit-paged-x , overflow: -webkit-paged-y
Blink>Media
HTMLVideoElement.playsInline
Blink>Payments
Allow PaymentRequest.show() to take optional detailsPromise
Blink>Scroll
Overscroll and Scrollend DOM events
Scroll Snap Stop
Blink>SecurityFeature>ContentSecurityPolicy
CSP: `script-src-attr`, `script-src-elem`, `style-src-attr`, `style-src-elem` directives
Blink>SecurityFeature>Referrer
Support noreferrer attribute for window.open()
Blink>ServiceWorker
Service workers appear in Chrome's Task Manager
waitUntil/respondWith can be called inside a microtask during event dispatch.
Blink>Storage>AppCache
AppCache: Cross-origin resource size padding
Blink>WebAuthentication
Web Authentication API: FIDO CTAP2 PIN support
Blink>WebRTC
WebRTC relative packet arrival delay statistic
Blink>WebRTC>PeerConnection
RTCDtlsTransport
Blink>WebShare
Web Share API Level 2
Fonte
Atualizar
Para atualizar o Chrome no Debian, Ubuntu e derivados de os comandos abaixo no terminal.
sudo apt update
sudo apt full-upgrade
Caso ainda não o tenha instalado em seu sistema, confira a matéria abaixo.
Comentários
Postar um comentário
olá, seja bem vindo ao Linux Dicas e suporte !!