Google corrects browser-based Java bugs
Wednesday, April 28, 2010 20:45Google issued a course correction for the stable version of Chrome on Wednesday. In addition to JavaScript sluggishness and Java plug-in issues introduced in the previous version, Google also made three critical security patches to its browser.
The last version of Google Chrome stable, version 4.1.249.1059, was using an incorrect path for version 6 update 20 of Sun’s Java plug-in. It was also, according to Google, significantly slower than the second-to-last update, version 4.1.249.1045. Both of those have been corrected in the current release.
The three security fixes address a cross-origin bypass in Google URL, memory corruption in HTML5 handling, and memory corruption in font handling. The first and third errors were discovered outside of Google and awarded $1,000 and $500, respectively, for participating in Google’s ongoing security bug-finding contest.
The full changelog can be read here.
