Google has pushed out an update designed to fix a pair of vulnerabilities involving the WebKit application framework that underpins its Chrome browser.

The most severe of the two flaws involved a "high risk" memory corruption flaw in WebKit, which creates a potential means for hackers to inject hostile code into the sandbox used by the browser. The second flaw involves a less severe information disclosure risk, involving the Drag and Drop functionality built into WebKit.

The update completes a busy week on the browser security front with a significant cumulative update for Internet Explorer on Tuesday and a Firefox update on Thursday. In addition, Apple released a beta version of its Safari 4 browser earlier this week.

Outside the browser security arena, Adobe released the first of its scheduled patch updates on Tuesday, and FreeBSD dropped an update designed to defend against a stack-based buffer-overflow that poses a potential code injection risk.

It's becoming more difficult for hard-pressed sys admins to keep track of updates, especially when many arrive without any indication a fix is in development.

Some security patching experts, such as Andrew Storms, director of security operations at nCircle, advocate the creation on a general industry patching day to make the patching process easier to plan and manage, security blogger Ryan Naraine reports. ®

Related stories

• Apple hunts down Win and Mac flavoured Safari flaws (12 August 2009)
• Firefox laggards offered security update (22 July 2009)
• Mozilla downplays risk from unpatched flaw (20 July 2009)
• Firefox update fixes zero-day JavaScript flaw (17 July 2009)
• Updated Unpatched Firefox flaw lets fox into henhouse (14 July 2009)
• Google Oompa-Loompas dream of virus-free OS (9 July 2009)
• Web browser makers line up battleships (6 July 2009)
• Chrome update plugs hush-hush browser hole (24 June 2009)
• Firefox update squashes 9 security bugs, 4 critical (12 June 2009)
• Microsoft patches record number of security bugs (10 June 2009)
• Review Fedora 11 leaps into filesystem unknown (9 June 2009)
• Firefox 3.5: In, out, shake it all about (9 June 2009)
• WWDC Apple takes Snow Leopard for walk (9 June 2009)
• Apple security is 'struggling,' researcher says (9 June 2009)
• Adobe's quarterly patch cycle to commence Tuesday (6 June 2009)