Lucene search

K
chromeHttps://chromereleases.googleblog.comGCSA-6867777432588318946
HistoryOct 05, 2017 - 12:00 a.m.

Stable Channel Updates for Chrome OS

2017-10-0500:00:00
https://chromereleases.googleblog.com
chromereleases.googleblog.com
10

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

The Stable channel has been updated to 61.0.3163.113 (Platform version: 9765.76.0) for most Chrome OS devices (*). This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days.

Some highlights of these changes are:

  • New default profile avatar and picker
  • Improved window management support in tablet mode
  • New App launcher
  • Improved power management setting
  • Improved Get Help App
  • New Sign in and Lock Screen design

Security Fixes
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed.

  • [766271] High CVE-2017-15403: Command injection in network_diag
  • [766275] High CVE-2017-15404: Symlink traversal in crash_reporter
  • [766276] High CVE-2017-15405: Symlink traversal in cryptohomed

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using 'Report an issue…' in the Chrome menu (3 vertical dots in the upper right corner of the browser).

Josafat Garcia
Google Chrome

(*) Except: Acer Chromebase 24, Acer Chromebook 11, Acer Chromebook 14, Acer Chromebook 15, Acer Chromebook R13, AOpen Chromebox Mini, ASUS Chromebook C202SA, ASUS Chromebook Flip, Chromebook 11, Chromebook 14 for work, Chromebook Pixel, Dell Chromebook 13, Dell Chromebook 13, HP Chromebook 11 G5, HP Chromebook x360, Lenovo Flex 11, Lenovo N23 Chromebook, Lenovo Thinkpad 11e, Samsung Chromebook Plus, Samsung Chromebook Pro, Toshiba Chromebook 2

Affected configurations

Vulners
Node
googlechrome_osRange<61.0.3163.113
VendorProductVersionCPE
googlechrome_os*cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for GCSA-6867777432588318946