Tag

Patch Gap

All articles tagged with #patch gap

"Google's Weekly Chrome Security Updates: A Stronger Defense Against Hackers"
technology3 years ago

"Google's Weekly Chrome Security Updates: A Stronger Defense Against Hackers"

Google is increasing the frequency of security updates for Chrome, with weekly updates now being released alongside the regular stable channel updates. This move aims to address the "patch gap" between vulnerable users and the release of fixes, which could be exploited by bad actors. The new weekly updates will not change how Chrome is used or updated, and milestone releases will still arrive at the expected timing. Apple has also adopted a similar approach to address increasing security threats. Users will see more updates in general, and Google is testing a new update notification experience for a small percentage of users.

"Google Urges Android Manufacturers to Swiftly Address Security Issues, Closing Patch Gap"
technology3 years ago

"Google Urges Android Manufacturers to Swiftly Address Security Issues, Closing Patch Gap"

Google's Year in Review report highlights the patch gap issue in the Android ecosystem, where downstream manufacturers take too long to release security fixes provided by upstream vendors. This delay allows publicly known vulnerabilities to function as zero-days, leaving users vulnerable. Google cited examples of delayed patches, including an ARM Mali GPU vulnerability that took 6 months to fix and a Samsung Internet vulnerability caused by using an outdated version of Chromium. The report emphasizes the need for faster distribution of fixes to protect users and highlights the prevalence of variant vulnerabilities that require deeper analysis and thorough fixes.