SOFTWARE DEVELOPER Google has released its Chrome 14 web browser that fixes a number of security vulnerabilities and adds support for sandboxed Native Client applications.
As far as security patches go, the Chrome 14.0.835.163 stable version has a whooping 32 of them, with 15 being considered highly important. However, despite the large number of flaws addressed, Google’s security bounty for this release totaled only $14,337, about $450 per bug.
That’s because seven vulnerabilities were rated as low and many others were discovered by members of the Google Chrome Security Team or the Chromium development community. These flaws are not rewarded through the Chromium Security Rewards program.
Regular Chrome security contributor Sergey Glazunov, the best paid researcher through Google’s bug bounty porgram so far, was credited with finding only one vulnerability in this release, but he earned a special $2,337 reward for it. Continue reading