Kua hangaia e Google he whakahou ki te Chrome 89.0.4389.128, e whakatika ana i nga whakaraeraetanga e rua (CVE-2021-21206, CVE-2021-21220), e waatea ana nga mahi mahi (0-ra). I whakamahia te whakaraeraetanga CVE-2021-21220 ki te hack Chrome i te whakataetae Pwn2Own 2021.
Ko te whakaraeraetanga o tenei whakaraeraetanga ka mahia ma te whakamahi i tetahi tikanga whakahōputu waehere WebAssembly (ko te whakaraeraetanga na te hapa i roto i te miihini mariko WebAssembly, e taea ai e koe te tuhi, te panui ranei i nga raraunga ki tetahi wahitau i roto i te mahara). E tohuhia ana ko te whakaraerae kua whakaatuhia kaore e taea e tetahi te karo i te wehe i te pouaka kirikiri, me te whakaekenga katoa me kitea tetahi atu whakaraeraetanga ki te puta i te pouaka kirikiri (i whakaatuhia he whakaraeraetanga mo Windows i te whakataetae Pwn2Own 2021).
Ko tetahi tauira o te mahi mo tenei raru i whakaputaina i runga i te GitHub i muri i te whakatikatika i te miihini V8, engari me te kore e tatari mo te whakahou tirotiro i runga i taua mea ka puta (ahakoa kaore i whakaputaina te mahi, ka taea e nga kaiwhaiwhai te mahi ano. i runga i te tātaritanga o nga huringa i roto i te putunga V8, kua puta i mua ake nei na te mea kua puta kee te whakatika i te V8, engari ko nga hua e pa ana ki runga kaore ano kia whakahoutia).
I tua atu, ka taea e koe te kite i te nekehanga o te raarangi whakaputanga mo te tuku Chrome 90 mo Linux, Windows me macOS. Ko tenei tukunga i whakaritea mo te Paenga-whawha 13, engari kaore i whakaputaina inanahi, a ko te putanga mo te Android anake i tukuna. I hangaia he putanga beta taapiri o Chrome 90 i tenei ra. Kaore ano kia panuitia he ra tuku hou.
Source: opennet.ru