Google's Updated Chrome Browser Conflicts with Anti-Virus Software
This week, Google pushed out a new version of Chrome that patched 15 security vulnerabilities, updating the browser to version 28.
Chrome 28 is the first version that uses Google's new Blink rendering engine, a switch from the Apple-developed WebKit engine that powers Safari. In April, Google said Blink would ensure Chrome's compatibility with the company's other products.
Unfortunately, the Chrome 28 update also rendered the browser unusable for many users who had Avira anti-virus products. Those with Avira Web Protection, at least on Windows, would find all Web pages blocked.
"This is caused by an incompatibility between the latest Google Chrome Browser in version 28 and the Avira Browser Security in conjunction with the IPv6 support. However, it is not enabled by default," the company said in a statement on its website. "Avira is already working on a solution with high priority."
Until then, Avira recommends switching off IPv6 support in its software. (IPv6 is the next-generation protocol for Internet addresses, but it has not yet been fully implemented, so disabling it should have little effect.)
Google depends on a large number of independent researchers to find vulnerabilities in its software, and accordingly, the company paid researchers a total of $35,000 for finding the bugs patched by Chrome 28.
The most critical vulnerability was reported by Collin Payne, who found a use-after-free network socket flaw — a type of flaw that lets malware use memory that's been discarded by a legitimate application.
The bulk of the cash was taken home by researcher Andrey Labunets, who reported two vulnerabilities and netted a total of $21,500.
Other researchers took home prizes of more than $3,100 for disclosing a man-in-the-middle attack and $2,000 for another use-after-free vulnerability.
The latest version of Chrome can be downloaded from Google, but for Windows and Chrome OS users who already have the browser installed, it should update automatically.
Mac users can also set Chrome to auto-update; Linux users will have to update the browser through their package managers.