Hello All,
The Dev channel has been updated to 131.0.6752.0 (Platform version: 16052.0.0) for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Google ChromeOS.
The Beta channel is being updated to OS version: 16033.17.0, Browser version: 130.0.6723.25 for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Giuliana Pritchard,
Google ChromeOS
This release includes upstream updates to CUPS components and the removal of cups-browsed.
When booted in verified mode, ChromeOS devices are not impacted by CVE-2024-47076, CVE-2024-47175, CVE-2024-47176 and CVE-2024-47177
The Stable channel is being updated to OS version: 16002.44.0 Browser version: 129.0.6668.80 for most ChromeOS devices.
If you find new issues, please let us know one of the following ways
Interested in switching channels? Find out how.
Security Fixes and Rewards
ChromeOS Vulnerability Rewards Program Reported Bug Fixes:
N/A
Other 3rd Party Security Fixes Included:
When booted in verified mode, ChromeOS devices are not impacted by CVE-2024-47076, CVE-2024-47175, CVE-2024-47176 and CVE-2024-47177
This release includes upstream updates to CUPS components and the removal of cups-browsed.
Android Security fixes can be found here
Chrome Browser Security Fixes:
[$55000][365376497] High CVE-2024-8904: Type Confusion in V8. Reported by Popax21 on 2024-09-08
[$8000][359949835] Medium CVE-2024-8905: Inappropriate implementation in V8. Reported by Ganjiang Zhou(@refrain_areu) of ChaMd5-H1 team on 2024-08-15
[$1000][337222641] Low CVE-2024-8908: Inappropriate implementation in Autofill. Reported by Levit Nudi from Kenya on 2024-04-26
[$8000][363538434] High CVE-2024-9121: Inappropriate implementation in V8. Reported by Tashita Software Security on 2024-09-01
[TBD][365802567] High CVE-2024-9122: Type Confusion in V8. Reported by Seunghyun Lee (@0x10n) on 2024-09-10
[TBD][365884464] High CVE-2024-9123: Integer overflow in Skia. Reported by raven at KunLun lab on 2024-09-11
Matt Nelson
Google ChromeOS
The Dev channel is being updated to OS version: 16033.11.0, Browser version: 130.0.6723.19, for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Giuliana Pritchard,
Google ChromeOS
The Beta channel is being updated to OS version: 16002.38.0, Browser version: 129.0.6668.74 for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Matt Nelson,
Google ChromeOS
Hello All,
The Stable channel has been released for 128.0.6613.163 (Platform version: 15964.59.0) for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Google ChromeOS.
A new LTC-126 version 126.0.6478.253 (Platform Version: 15886.78.0), is being rolled out for most ChromeOS devices.
This version includes fixes for:
349342289 High CVE-2024-6989 Use after free in Loader
357391257 High CVE-2024-8362 Use after free in WebAudio
355731798 High CVE-2024-7967 Heap buffer overflow in Fonts
360265320 High CVE-2024-8193 Heap buffer overflow in Skia
360758697 High CVE-2024-8198 Heap buffer overflow in Skia
339654392 Medium CVE-2024-7976 Inappropriate implementation in FedCM
The Dev channel is being updated to OS version: 16033.5.0, Browser version: 130.0.6723.9, for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Giuliana Pritchard,
Google ChromeOS
The Beta channel is being updated to OS version: 16002.31.0, Browser version: 129.0.6668.62 for most ChromeOS devices.
If you find new issues, please let us know one of the following ways:
Matt Nelson,
Google ChromeOS