Monday, November 24, 2008

Beta release: 0.4.154.25

Google Chrome version 0.4.154.25 has been released. You will automatically get updated in the next few days. You can open About Google Chrome (from the wrench menu) to get the update at any time.

This is a roll up of fixes that have previously been released to our Dev channel users. See http://dev.chromium.org/getting-involved/dev-channel/release-notes for details on the changes that have been made since 0.3.154.9.

Note: Please use the excellent Google Chrome Help Center or file a bug to report problems. There are a lot of people watching those sites and ready to help.

New Features

  • Bookmark manager with import/export.
Use the 'Customize and control Google Chrome' (wrench) menu to open the Bookmark manager. You can search bookmarks, create folders, and drag and drop bookmarks to new locations. The Bookmark Manager's Tools menu lets you export or import bookmarks.

  • Privacy section in Options.
We grouped together all of the configuration options for features that might send data to another service. Open the wrench menu, click Options, and select the Under the Hood tab.

  • New blocked pop-up notification.
The pop-up blocker formerly just minimized pop-up windows to the lower right corner of the browser window, create one 'constrained' window for each pop-up. Now, Google Chrome displays one small notification in the corner that shows the number of blocked pop-ups. A menu on the notification lets you open a specific pop-up, if needed.

Security Issues

  • This release fixes an issue with downloaded HTML files being able to read other files on your computer and send them to sites on the Internet. We now prevent local files from connecting to the network with XMLHttpRequest() and also prompt you to confirm a download if it is an HTML file.
Severity: Moderate. If a user could be enticed to open a downloaded HTML file, this flaw could be exploited to send arbitrary files to an attacker.
[Originally fixed in 154.18]

Other Updates

Bug-fix updates (no new features) to major components:
  • Gears is updated to version 0.5.4.0 (from 0.4.24.0).
  • V8 (JavaScript engine) is updated to 0.3.9.2 (from 0.3.5.0).

--Mark Larson, Google Chrome Program Manager

Wednesday, November 19, 2008

Dev Release: 0.4.154.23

We're releasing another update to the Dev channel because "Woah. Google Chrome has crashed."

We pushed 154.22 on Monday night, and immediately found that it crashes frequently. Thank you to everyone who has "Help make Google Chrome better..." enabled: the crash reports we received allowed us to identify and respond to the issue quickly.

This release fixes the primary causes of crashes in 0.4.154.22 (see issue 4531). 

--Mark Larson, Google Chrome Program Manager

Monday, November 17, 2008

Dev Release: 0.4.154.22

Google Chrome 0.4.154.22 has been released to the Dev channel ONLY. This is a bugfix-only release. There are no new features.

About the Dev Channel
The Dev channel lets you test the latest fixes and get access to new features as they're being developed. You can learn more about the Dev channel and how to subscribe here:http://dev.chromium.org/getting-involved/dev-channel/.

Reminder: please file (or update existing) issues at http://code.google.com/p/chromium/issues. 

Top Issues Fixed

  • Google Chrome sometimes hangs when using a site with Gears offline data enabled.
  • If you don't have Adobe Flash installed, Google Chrome shows a message with a link to install Flash. The installer would get downloaded, but failed to install Flash. (Issue 4346)
  • Sometimes you had to restart Google Chrome twice after an update to get the new version. (Issue 4316)
  • Google Chrome was preventing pop-up windows from opening Javascript alert messages. This broke some sites that open forms in new windows and use Javscript alert() to notify you about form errors. (Issue 4158)
  • Folders you add to the bookmarks bar were not always showing up in the folder list of the Add bookmark dialog. (Issue 766)
  • Potential fix for Google Chrome crashing on Windows XP 64-bit when you open the Options dialog.  (Issue 49)
For a full list of all the bugs addressed since 154.18, please visit http://dev.chromium.org/getting-involved/dev-channel/release-notes.

--Mark Larson, Google Chrome Program Manager

Tuesday, November 11, 2008

Dev Release: 0.4.154.18

Google Chrome 0.4.154.18 has been released to the Dev channel ONLY. This release introduces a couple of new features (and, as always, fixes a few bugs).

About the Dev Channel
The Dev channel lets you test the latest fixes and get access to new features as they're being developed. You can learn more about the Dev channel and how to subscribe here:http://dev.chromium.org/getting-involved/dev-channel/.

Reminder: please file (or update existing) issues at http://code.google.com/p/chromium/issues.

New Features

  • Bookmark manager with import/export.
    Use the 'Customize and control Google Chrome' (wrench) menu to open the Bookmark manager. You can search bookmarks, create folders, and drag and drop bookmarks to new locations. The Bookmark Manager's Tools menu lets you export or import bookmarks.

  • Privacy section in Options.
    We grouped together all of the configuration options for features that might send data to another service. Open the wrench menu, click Options, and select the Under the Hood tab.

  • New blocked pop-up notification.
    The pop-up blocker formerly just minimized pop-up windows to the lower right corner of the browser window, create one 'constrained' window for each pop-up. Now, Google Chrome displays one small notification in the corner that shows the number of blocked pop-ups. A menu on the notification lets you open a specific pop-up, if needed.

Known Issues

  • Sites that use Gears to synchronize offline data may occasionally hang. You should disable offline access for sites until a fix is released. (We're working on it and hope to have the update later this week.)

Security Issues
  • This release fixes an issue with downloaded HTML files being able to read other files on your computer and send them to sites on the Internet. We now prevent local files from connectin to the network with XMLHttpRequest() and also prompt you to confirm a download if it is an HTML file.
    Severity: Moderate. If a user could be enticed to open a downloaded HTML file, this flaw could be exploited to send arbitrary files to an attacker.

For more details on what's changed and what issues are fixed, see the detailed release notes at http://dev.chromium.org/getting-involved/dev-channel/release-notes.


--Mark Larson, Google Chrome Program Manager