Lucene search

K
chromeHttps://chromereleases.googleblog.comGCSA-842463280364430921
HistoryMar 15, 2013 - 12:00 a.m.

Stable Channel Update for Chrome OS

2013-03-1500:00:00
https://chromereleases.googleblog.com
chromereleases.googleblog.com
29

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

46.1%


The Stable channel has been updated to 25.0.1364.173 (Platform version: 3428.210.0) for all Chrome OS devices. This build contains a number of bug fixes and security improvements. Machines will be receiving updates over the next several days.


Release highlights:

  • Updated Flash to 11.6.602.180, which resolves a bug where some DRM video content would be unable to play (e.g.: Amazon Prime Video).

  • Fixed an issue with Chromebook Pixel and Acer C7 systems freezing while playing videos.

  • Fixed an issue with Acer C7 systems freezing after resume.

Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

  • [181083] High CVE-2013-0915: Overflow in the GPU process. Credit to Pinkie Pie.

  • [chromium-os:39733] High CVE-2013-0913: Time-of-Check/Time-of-Use and counting overflows in i915 driver. Credit to Pinkie Pie.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using β€˜Report an issue…’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Danielle Drew

Google Chrome

Affected configurations

Vulners
Node
googlechrome_osRange<25.0.1364.173
VendorProductVersionCPE
googlechrome_os*cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

46.1%