Google Chrome Releases
Follow
Stable Channel Update for ChromeOS / ChromeOS Flex
ChromeOS M-156 has been released on the Stable channel, bringing various security updates. Users are encouraged to report any new issues through bug filings or ChromeOS communities. The update includes fixes for compromised third-party CA certificates, which impacted TLS security for all clients. Several high-severity kernel memory corruption vulnerabilities were patched, specifically in arc-keymaster, mali_kbase, and mali. Numerous Chrome browser security fixes were also implemented, addressing critical and high-severity issues. These browser fixes include multiple instances of "use after free" vulnerabilities across different components like Track, PDF, Media, V8, and Navigation. Additionally, other vulnerabilities such as "uninitialized resource" and "type confusion" were resolved. Some of these security fixes were reported by researchers and resulted in bug rewards. Android security fixes are available via a separate link. The release notes emphasize the importance of reporting any newly discovered issues. Users interested in exploring different update channels can find instructions on how to switch. This update aims to enhance the overall security and stability of ChromeOS devices.