Google has issued a security patch for its Chrome 2 browser
less than a month after itsofficial release.
The emphasis in Chrome 2 was on speed, but Google also claimed
it was the most stable and that around 300 bugs had been fixed
since the browser's launch.
The latest patch fixes two flaws in the WebKit open source
browser engine at the heart of Chrome.
The first fix is for a memory corruption problem that Google has
given a high severity rating.
"Visiting a maliciously crafted website may lead to a tab crash
or arbitrary code execution in the Google Chrome sandbox," said
Mark Larson, Google Chrome program manager in a
blog posting.
The update addresses the issue through improved memory
management, he said.
The second fix is for WebKit's handling of drag and drop
functions that given a medium severity rating.
"This may lead to the disclosure of sensitive information when
content is dragged over a maliciously crafted web page. This update
addresses the issue through improved handling of drag events," said
Larson.