Dev Channel Update

Wednesday, September 8, 2010 | 18:00

Labels:

The Dev channel has been updated to 7.0.517.0 for Windows, Linux, and ChromeFrame.

All

  • about:labs (Issue: 53399)
  • Fewer wstrings in the bookmark code!
  • Problems visiting http://localhost in various network configurations should be resolved (Issues: 42058, 49024, 32522).
Windows
  • See All
Linux
  • [r58011] [phajdan.jr@chromium.org] [OS-LINUX] Issue 29333 - use_system_xml causes many sites to fail to load
  • Remove libxml hack that is not needed after we rolled in the WebKit fix (Issue: 29333)
  • [r58449] Fix default browser selection on KDE 4 on many RPM-based distributions. (Issue 33842)
Known Issues
  • Certain actions on YouTube fail, such as "Like" (Issue: 54424)
More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Stable, Beta Channel Updates

Tuesday, September 7, 2010 | 16:14

Labels: ,

The Stable and Beta channels of Chrome have been updated to 6.0.472.55 for Windows, Mac, and Linux (Update: Chrome Frame is also now updated to this version on the Beta channel). This version contains the following fixes:

All
Windows
  • [r58190] Importing data from other browsers when chrome is set as default  (bug 53655)
  • [r58288] Chrome can’t be made default browser when it already exists (bug 53656)
More details about additional changes are available in the svn revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel - find out how.

Jason Kersey
Google Chrome

Stable and Beta Channel Updates

Thursday, September 2, 2010 | 07:04

Labels: ,

Google Chrome 6.0.472.53 has been released to the stable and beta channels for Windows, Mac, and Linux.  Updates from the previous stable release include:
  • Updated UI
  • Form Autofill
  • Syncing of extensions and Autofill data
  • Increased speed and stability
More information on these and other changes in Chrome 6 can be found on the Google Chrome blog. Download Chrome today!

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [34414] Low Pop-up blocker bypass with blank frame target. Credit to Google Chrome Security Team (Inferno) and “ironfist99”.
  • [37201] Medium URL bar visual spoofing with homographic sequences. Credit to Chris Weber of Casaba Security.
  • [41654] Medium Apply more restrictions on setting clipboard content. Credit to Brook Novak.
  • [45659] High Stale pointer with SVG filters. Credit to Tavis Ormandy of the Google Security Team.
  • [45876] Medium Possible installed extension enumeration. Credit to Lostmon.
  • [46750] [51846] Low Browser NULL crash with WebSockets. Credit to Google Chrome Security Team (SkyLined), Google Chrome Security Team (Justin Schuh) and Keith Campbell.
  • [$1000] [50386] High Use-after-free in Notifications presenter. Credit to Sergey Glazunov.
  • [50839] High Notification permissions memory corruption. Credit to Michal Zalewski of the Google Security Team and Google Chrome Security Team (SkyLined).
  • [$1337] [51630] [51739] High Integer errors in WebSockets. Credit to Keith Campbell and Google Chrome Security Team (Cris Neckar).
  • [$500] [51653] High Memory corruption with counter nodes. Credit to kuzzcc.
  • [51727] Low Avoid storing excessive autocomplete entries. Credit to Google Chrome Security Team (Inferno).
  • [52443] High Stale pointer in focus handling. Credit to VUPEN Vulnerability Research Team (VUPEN-SR-2010-249).
  • [$1000] [52682] High Sandbox parameter deserialization error. Credit to Ashutosh Mehra and Vineet Batra of the Adobe Reader Sandbox Team.
  • [$500] [53001] Medium Cross-origin image theft. Credit to Isaac Dawson.
This release also fixes [51070] (Windows kernel bug workaround; credit to Marc Schoenefeld), which was incorrectly declared fixed in version 5.0.375.127.

In addition, we would like to credit Google Chrome Security Team (Inferno), James Robinson (Chromium development community), Google Chrome Security Team (Cris Neckar), Aki Helin of OUSPG, Fred Akalin (Chromium development community), Anna Popivanova, “myusualnickname”, Michal Zalewski of the Google Security Team, kuzzcc and Aaron Boodman (Chromium development community) for finding bugs during the development cycle such that they never reached a stable build.

If you find new issues, please let us know by filing a bug.   If you would like to use the stable channel, you can find out more about changing your Chrome channel

Jason Kersey
Google Chrome

Beta Channel Update

Friday, August 27, 2010 | 15:45

Labels:

The beta channel for Chrome has been updated to 6.0.472.51 for all platforms. It contains many stability fixes, UI updates, and some additional translation work.

Interested in seeing all the changes? Check out the full svn revision log.

Change the release channel you are currently on.

Found a bug? Please let us know!

Jason Kersey
Google Chrome

Dev Channel Update

Wednesday, August 25, 2010 | 17:16

Labels:

The Dev channel has been updated to 7.0.503.0 for Windows, Mac and Chrome Frame; 7.0.503.1 for Linux.  Some of the updates:

All
  • [r56615] IP addresses typed into the omnibox now work when offline. (Issue: 39830)
Mac
  • More tweaks and polish to the Wrench menu (Issues 48679, 51643)
Chrome Frame
  • Many stability fixes
More details about additional changes are available in the svn revision log.  If you find new issues, please let us know by filing a bug.   Find out more about changing your Chrome channel.

Jason Kersey
Google Chrome

Beta Channel Update

Friday, August 20, 2010 | 15:27

Labels:

The Beta channel has been updated to 6.0.472.41 for Windows, Mac and Chrome Frame (Updated - Linux also now available). It contains additional stability fixes, UI updates, and an updated set of translations. More details about additional changes are available in the svn revision log.

You can find out how to use the different Chrome channels at
http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by
filing a bug.


Jason Kersey
Google Chrome

Stable Channel Update

Thursday, August 19, 2010 | 15:11

Labels:

Google Chrome 5.0.375.127 has been released to the Stable Channel on Windows, Mac, and Linux.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
Aside from the listed security bugs fixed in Chromium, we have also deployed a workaround for a critical vulnerability where the root cause lies in an external component. Credit and $1337 to Marc Schoenefeld for enabling us to work around another Windows kernel bug [51070].


  • [$1337] [45400] Critical Memory corruption with file dialog. Credit to Sergey Glazunov.
  • [$500] [49596] High Memory corruption with SVGs. Credit to wushi of team509.
  • [$500] [49628] High Bad cast with text editing. Credit to wushi of team509.
  • [$1000] [49964] High Possible address bar spoofing with history bug. Credit to Mike Taylor.
  • [$2000] [50515] [51835] High Memory corruption in MIME type handling. Credit to Sergey Glazunov.
  • [$1337] [50553] Critical Crash on shutdown due to notifications bug. Credit to Sergey Glazunov.
  • [51146] Medium Stop omnibox autosuggest if the user might be about to type a password. Credit to Robert Hansen.
  • [$1000] [51654] High Memory corruption with Ruby support. Credit to kuzzcc.
  • [$1000] [51670] High Memory corruption with Geolocation support. Credit to kuzzcc.
If you find issues, please let us know: http://code.google.com/p/chromium/issues/entry

Jason Kersey
Google Chrome