Serious Discussion Google Chrome Stable Channel Updates

[Gandalf_The_Grey]

Google Chrome 120.0.6099.129/130 Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.129 for Mac,Linux and 120.0.6099.129/130 to Windows which will roll out over the coming days/weeks.

This update includes 1 security fix.

[$NA][1513170] High CVE-2023-7024: Heap buffer overflow in WebRTC. Reported by Clément Lecigne and Vlad Stolyarov of Google's Threat Analysis Group on 2023-12-19

Google is aware that an exploit for CVE-2023-7024 exists in the wild.

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.129 for Mac,Linux and 120.0.6099.129/130 to Windows which will roll out over the coming d...

chromereleases.googleblog.com

 

[silversurfer]

Google Chrome 120.0.6099.199/200 Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.199 for Mac, Linux and 120.0.6099.199/200 to Windows which will roll out over the coming days/weeks.
A full list of changes in this build is available in the Log.

This update includes 6 security fixes.

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.199 for Mac,Linux and 120.0.6099.199/200 to Windows which will roll out over the coming da...

chromereleases.googleblog.com

 

[Ink]

Chrome 121 for Android Beta

A “Clear browsing data” shortcut now appears in Chrome’s main overflow menu. It’s the fourth item in the list and just below “History” for a grouping that makes thematic sense, though the three-dot menu is getting ever long.

We’re seeing this rolled in Chrome 121 for Android, which is currently in beta. It’s already live on the desktop and iOS browser.

• Chrome for Android making it easier to Clear browsing data

 

[SeriousHoax]

Chrome 121 for Android Beta

• Chrome for Android making it easier to Clear browsing data

View attachment 280730

IMO, a critical feature like this shouldn't be there. Putting it near the top inside the settings menu would've been better. It seems more like Google is telling the EU that it is easy to clear Chrome's browsing data.

 

[Ink]

IMO, a critical feature like this shouldn't be there. Putting it near the top inside the settings menu would've been better. It seems more like Google is telling the EU that it is easy to clear Chrome's browsing data.

Why do you consider this to be a Critical feature?

 

[oldschool]

Why do you consider this to be a Critical feature?

For security & privacy, at least for those who know and care. Currently there is no easy way to it other than Shft+Ctrl+Del.

 

[SeriousHoax]

Why do you consider this to be a Critical feature?

I was speaking mainly from the point of an average user, who may not know that clearing browsing data would also log them out of sites where they are logged in. So they may click on buttons like this and face an unintended consequence.

 

[Gandalf_The_Grey]

Google Chrome 120.0.6099.216/217 Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.216 for Mac,Linux and 120.0.6099.216/217 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

The Extended Stable channel has been updated to 120.0.6099.216 for Mac and 120.0.6099.217 for Windows which will roll out over the coming days/weeks.

This update includes 1 security fix.

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.216 for Mac,Linux and 120.0.6099.216/217 to Windows which will roll out over the coming da...

chromereleases.googleblog.com

 

[Gandalf_The_Grey]

Google Chrome 120.0.6099.224/225/234 Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.234 for Mac and 120.0.6099.224 for Linux and 120.0.6099.224/225 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

The Extended Stable channel has been updated to 120.0.6099.234 for Mac and 120.0.6099.225 for Windows which will roll out over the coming days/weeks.

This update includes 4 security fixes.

Google is aware of reports that an exploit for CVE-2024-0519 exists in the wild.

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.234 for Mac and 120.0.6099.224 for Linux and 120.0.6099.224/225 to Windows which will roll...

chromereleases.googleblog.com

 

[Gandalf_The_Grey]

Google Chrome 121.0.6167.85/.86 Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.85 for Mac and Linux and 121.0.6167.85/.86 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the log.

This update includes 17 security fixes.

Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.85 for Mac and Linux and 121.0.6167.85/.86 to Windows which will roll out over the comin...

chromereleases.googleblog.com

 

[Gandalf_The_Grey]

Google Chrome 121.0.6167.139/140 Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.139 for Mac and Linux and 121.0.6167.139/140 to Windows which will roll out over the coming days/weeks.

This update includes 4 security fixes.

Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.139 for Mac and Linux and 121.0.6167.139/140 to Windows which will roll out over the com...

chromereleases.googleblog.com

 

[oldschool]

Stable Channel Update for Desktop​

Tuesday, February 6, 2024
The Stable channel has been updated to 121.0.6167.160 for Mac and Linux and 121.0.6167.160/161 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the log.
Security Fixes and Rewards


Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed


This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.


[$5000][41494539] High CVE-2024-1284: Use after free in Mojo. Reported by Anonymous on 2024-01-25

[$TBD][41494860] High CVE-2024-1283: Heap buffer overflow in Skia. Reported by Jorge Buzeti (@r3tr074) on 2024-01-25


We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

As usual, our ongoing internal security work was responsible for a wide range of fixes:

[324073667] Various fixes from internal audits, fuzzing and other initiatives

 

[silversurfer]

Stable Channel Update for Desktop​

Tuesday, February 13, 2024

The Stable channel has been updated to 121.0.6167.184 for Mac and Linux and 121.0.6167.184/185 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the log.

This update includes 1 security fix. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.184 for Mac and Linux and 121.0.6167.184/185 to Windows which will roll out over the com...

chromereleases.googleblog.com

 

[oldschool]

The Extended Stable channel has been updated to 122.0.6261.57 for Windows and 122.0.6261.57 for Mac, which will roll out over the coming days/weeks.

Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 12 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$7000][41495060] High CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous on 2024-01-26
[$5000][41481374] High CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim(@cassidy6564) on 2023-12-06
[$8000][41487933] Medium CVE-2024-1671: Inappropriate implementation in Site Isolation. Reported by Harry Chen on 2024-01-03
[$3000][41485789] Medium CVE-2024-1672: Inappropriate implementation in Content Security Policy. Reported by Georg Felber (TU Wien) & Marco Squarcina (TU Wien) on 2023-12-19
[$2000][41490491] Medium CVE-2024-1673: Use after free in Accessibility. Reported by Weipeng Jiang (@Krace) of VRI on 2024-01-11
[$1000][40095183] Medium CVE-2024-1674: Inappropriate implementation in Navigation. Reported by David Erceg on 2019-05-27
[$1000][41486208] Medium CVE-2024-1675: Insufficient policy enforcement in Download. Reported by Bartłomiej Wacko on 2023-12-21
[$1000][40944847] Low CVE-2024-1676: Inappropriate implementation in Navigation. Reported by Khalil Zhani on 2023-11-21

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

As usual, our ongoing internal security work was responsible for a wide range of fixes:

• [326063910] Various fixes from internal audits, fuzzing and other initiatives

Stable Channel Update for Desktop

 

[Gandalf_The_Grey]

Google Chrome 122.0.6261.69/.70 Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.69 for Mac,Linux and 122.0.6261.69/.70 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

The Extended Stable channel has been updated to 122.0.6261.69 for Mac and 122.0.6261.70 for Windows which will roll out over the coming days/weeks.

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.69 for Mac,Linux and 122.0.6261.69/.70 to Windows which will roll out over the coming days...

chromereleases.googleblog.com

 

[Gandalf_The_Grey]

Google Chrome 122.0.6261.94/.95 Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.94 for Mac,Linux and 122.0.6261.94/.95 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

The Extended Stable channel has been updated to 122.0.6261.94 for Mac and 122.0.6261.95 for Windows which will roll out over the coming days/weeks.

This update includes 4 security fixes.

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.94 for Mac,Linux and 122.0.6261.94/.95 to Windows which will roll out over the coming days...

chromereleases.googleblog.com

 

[Gandalf_The_Grey]

Google Chrome 122.0.6261.111/112 Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.111/.112 for Windows and Mac and 122.0.6261.111 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 3 security fixes.

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.111/.112 for Windows and Mac and 122.0.6261.111 to Linux which will roll out over the co...

chromereleases.googleblog.com

 

[silversurfer]

Google Chrome 122.0.6261.128/.129 Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.128/.129 for Windows and Mac and 122.0.6261.128 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

Stable Channel Update for Desktop

The Stable channel has been updated to 122.0.6261.128/.129 for Windows and Mac and 122.0.6261.128 to Linux which will roll out over the comi...

chromereleases.googleblog.com

 

[oldschool]

Browse safely with real-time protection on Chrome

 

[blackice]

Browse safely with real-time protection on Chrome

On the Standard setting now, huh? Viruses will be even more rare with this change I suppose.