Shulou(Shulou.com)05/31 Report--

­Chrome 61 is officially released today with many developer-related features added. In Mac, Windows, and Linux systems, Chrome 61 begins to support WebUSB API, as well as PaymentRequest API. The advanced network platform API supports most hardware peripherals, such as keyboards, mice, printers and game consoles. In order to use specialized USB peripherals such as education, science, or industry, users must use system-level permissions to find and install potentially unsafe drivers and software.

­Chrome now supports WebUSB API, allowing network applications to communicate with peripherals with the consent of the user. This can achieve all the functions provided by the above devices, while still ensuring the security of the network.

­PaymentRequest API can provide a secure, seamless cross-platform checkout experience. In Chrome 61, browsers also support web information API, which means that websites can access device information, such as device memory API can detect memory occupancy to optimize web applications.

­in the Android version of Chrome 61, a new Web Share API network sharing function has been added, and the browser can activate the Android native sharing function.

­Chrome 61.0.3163.79 contains a number of fixes and improvements-- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 61.

­Security Fixes and Rewards

­Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed.

­This update includes 22 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

­[$5000] [737023] High CVE-2017-5111: Use after free in PDFium. Reported by Lu Nguy Tencent on (@ l4wio) of KeenLab, 2017-06-27

­[$5000] [740603] High CVE-2017-5112: Heap buffer overflow in WebGL. Reported by Tobias Klein (www.trapkit.de) on 2017-07-10

­[$5000] [747043] High CVE-2017-5113: Heap buffer overflow in Skia. Reported by Anonymous on 2017-07-20

­[$3500] [752829] High CVE-2017-5114: Memory lifecycle issue in PDFium. Reported by Ke Liu of Tencent's Xuanwu LAB on 2017-08-07

­[$3000] [744584] High CVE-2017-5115: Type confusion in V8. Reported by Marco Giovannini on 2017-07-17

­[$TBD] [759624] High CVE-2017-5116: Type confusion in V8. Reported by Anonymous on 2017-08-28

­[$1000] [739190] Medium CVE-2017-5117: Use of uninitialized value in Skia. Reported by Tobias Klein (www.trapkit.de) on 2017-07-04

­[$1000] [747847] Medium CVE-2017-5118: Bypass of Content Security Policy in Blink. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-07-24

­[$Ngamma] [725127] Medium CVE-2017-5119: Use of uninitialized value in Skia. Reported by Anonymous on 2017-05-22

­[$Ngamma] [718676] Low CVE-2017-5120: Potential HTTPS downgrade during redirect navigation. Reported by Xiaoyin Liu (@ general_nfs) on 2017-05-05

­We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

­As usual, our ongoing internal security work was responsible for a wide range of fixes:

­[762099] Various fixes from internal audits, fuzzing and other initiatives

­Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.

­download address:

­https://www.google.com/chrome/

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.