Software Update: Google Chrome 36.0.198.143

Google has released an update to version 36 of its Chrome web browser. Google Chrome is available for Windows, Linux, and OS X. There are also versions for Android and iOS, but they follow a slightly different release schedule. In version 36, improvements have been made to notifications, a browser crash recovery bubble has been added and the Linux version has been given a Chrome App Launcher. In addition, the necessary security updates and bug fixes have of course been implemented. The changelog for this update also looks like this:

Stable Channel Update
The Stable Channel has been updated to 36.0.1985.143 for Windows, Mac and Linux. This release contains a Flash Player Update.

Security Fixes and Rewards
This update includes 12 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

• [390174] High CVE-2014-3165: Use after free in web sockets.
• [398925] High CVE-2014-3166: Information disclosure in SPDY.

As usual, our ongoing internal security work responsible for a wide range of fixes:

• [400950] CVE-2014-3167: Various fixes from internal audits, fuzzing and other initiatives.

Many of the above bugs were detected using AddressSanitizer. This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.