Monday, January 25, 2010

Stable Channel Update

The stable channel has been updated to 4.0.249.78 for Windows, and includes the following features and security fixes (since 3.0):
  • Extensions
  • Bookmark sync
  • Enhanced developer tools
  • HTML5: Notifications, Web Database, Local Storage, WebSockets, Ruby support
  • v8 performance improvements
  • Skia performance improvements
  • Full ACID3 pass, due to re-enabled remote font support (with added defense against bugs in operating system font libraries)
  • HTTP byte range support
  • New security feature: "Strict Transport Security" support
  • Experimental new anti-reflected-XSS feature called "XSS Auditor"
Security Fixes:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [3275] Low Pop-up blocker bypass. Credit to Google Chrome Security Team (SkyLined).
  • [9877] Medium Cross-domain theft due to CSS design error. Credit to Chris Evans of the Google Security Team.
  • [12523] Medium Browser memory error with stale pop-up block menu. Credit to Jacob Balle and Carsten Eiram, Secunia Research.
  • [20450] Low Prevent XHR to directories. Credit to the Chromium development community.
  • [23693] Low Escape more characters in shortcuts. Credit to Michal Zalewski of the Google Security Team and, independently, Inferno of SecureThoughts.com.
  • [8864] [24701] [24646] High Renderer memory errors drawing on canvases. Credit to Michal Zalewski of the Google Security Team and Google Chrome Security Team (SkyLined).
  • [28566] High Image decoding memory error. Credit to Robert Swiecki of the Google Security Team.
  • [29920] Low Corner case failure to strip Referer. Credit to the Chromium development community.
  • [30660] High Cross-domain access error. Credit to Tokuji Akamine, Senior Consultant at Symantec Consulting Services.
  • [31307] High Bitmap deserialization error. Credit to Mark Dowd, under contract to Google Chrome Security Team.
  • [31517] Low Browser crash with nested URL.
Anthony Laforge
Google Chrome Program Manager

77 comments:

Kurtextrem said...

these security fixes includet in dev version 4.0.302.2 allready, or?

Cris said...

with google chrome I download files very slowly.

When do you solve this problem?

Evan said...

Do the bookmarks sync to google.com/bookmarks?

Maite said...

With this version, I can´t see files that use Windows Media Player.

Windows Media Player don´t work with this version of Google Chrome

Maite said...

for example, in this web, doesn´t work Windows Media Player:
http://globovision.batanga.com/Player/new/default2.asp?nocache=0.9855770207941532

Sling said...

>>> for example, in this web, doesn´t work Windows Media Player:
http://globovision.batanga.com/Player/new/default2.asp?nocache=0.9855770207941532

I just open this page, confirm plugin download, install it and all works fine

Maite said...

excuse me SLING, but What plugin?. Wht´s the name of the plugin for W.M.P?

Sling said...

I don`t notice what was the exact name, but I was surprised that there was FireFox in name

Maite said...

ok, I don´t write in English, excuse me.

I dont´know what´s the plugin that I need for see file in WMP. What´s the plugin?

yurkennis said...

How can I prevent Chrome from updating to this version in the next restart?

Until http://code.google.com/p/chromium/issues/detail?id=27380 is fixed, 4.x stable performs definitely worse for me compared to the latest 3.x stable.

Leon said...

Oh my :) Please, please, please do not fix the windows media player plug-in compatibility. It was something I've been trying to disable for weeks. Thanks for the unexpected (or expected?) bonus.

Jug said...

Wow! Congrats, Google Chrome Team! :)

Sim said...

Why it is as dev version?

Maite said...

plugin for Windows Media Player:
http://port25.technet.com/pages/windows-media-player-firefox-plugin-download.aspx

Vivek P.Netha said...

Stable channel releases really ought to be feature-consistent with other chrome versions (Linux and Mac). And be released at the same time.

Michael Hayes said...

Can't display Slashdot. Wow.

Joseph said...

I get an error on my Gmail inbox and when I try to compose a message it hangs.

I read on the Gmail help page under known issues that the error message does occur, but not that it is impossible to compose a message.

Why is the help page telling me that instead of the stable version of a secure, stable, fast, competent web browser, I should try an older version or a different browser?

Fix quickly please.

Jug said...

Evan: No, it syncs your bookmarks to Google Docs, not Google Bookmarks. They can be seen if you log in to that service.

Patrik said...

facebook chat is downloading mp3 sound after every new message popup. very annoying please fix it.

XDRAGON360 said...

Why is the stable version so close to the dev channel version? Dev seems a bit slow to be upgraded now...

Fabio Turati said...

"v8 performance improvements"
I'd like to get more details about this. I ran a Sunspider benchmark before updating. I got 577.6 ms with 3.0, and 616.6 ms with 4.0. Not that I care about it, but this isn't an improvement, it actually got worse.
Do I have to run your own Javascript benchmark to see the improvement?
Anyway, now that I've updated, I can't make other comparisons...

For the record, I'm using a Q6600 @ 2.4 GHz, 2 GB RAM on Windows 7 Home Premium 64 bit.

I can provide the links to the 2 tests if you want.

w8sdz said...

Suggestion: Please add the stable version number below the Download Google Chrome button on http://www.google.com/chrome

Most downloaders would find this information very useful if they want to know that it is newer than the Stable version they have on their PC.

Gensplejs said...

Boockmark sync released to stable without google apps support. WTF!

Unregistered said...

Meh. No Youtube and Veoh download support. Still a distant second to Firefox.

XDRAGON360 said...

At least Chrome is improving...

ROCKY-TIGER said...

ROCKY-TIGER@GMX.COM
ROCKY_TIGER@YMAIL.COM
ROCKY-TIGER@WINDOWSLIVE.COM
ROCKY_0717@YAHOO.COM

Joseph said...

If anyone read about my issue, it can be fixed simply by deleting the old cookies from your old version of Chrome.

Wrench -> "Options" -> "Personal Stuff" -> "Clear browsing data"

MWP said...

My Google Sidewiki for Chrome (bookmarklet) doesn't work anymore in 4.0 version!

Win Vis 32

Random said...

About windows says it's "dev"

32bit Windows 7

WebCommenter said...

Huh, Google really tries to sell everything under name the "HTML5".
Notifications has nothing to do with HTML5.
And actually WebSockets is also a separate draft, and so is Web Database (well, actually there is nothing called "Web Database")

XDRAGON360 said...

@Random, did you install the dev channel? What version is it?

tr said...

Open popups in a new tab is already a feature?

Jim said...

Why was "clear browsing data" moved? I clear after every browsing session.

8ball said...

I lose Extension settings after cleaning history and cache.
this shouldn't happen!!, there is no reason for me to reset ext. settings.

johnny said...

Firefox and IE are able to update automatically when a computer is connected to internet VIA Proxy. But Chrome can not be updated unless there is a direct connection to the internet.. Chrome Team, Please work on this, there are a hell lot of chrome users connected to internet through proxy.

Jeffrey said...

Overall, Google Chrome development team have made a great mistakes in their newly launch browser. Some of the essentials element is completely omitted from the menu and the performance rendering is reduced significantly. Moreover, one of the most frustration things is that the extension application is not perform efficiently as what the Mozilla Firefox did and this could directly hurts the Google Chrome supporter. Hence, by comparing the features as well as capabilities, Mozilla Firefox was significantly perform better than Google Chrome in terms of compatibility as well as user friendliness.

air shoes said...

I like your blog. Thank you. They are really great .
Some new style Puma Cat shoes is in fashion this year.
The Nike Air Shoes is a best Air Shoes .
Nike Air Rift is good and Cheap Nike Shoes.
If you are a fans of Puma basket,we would offer the good and Cheap Puma Shoes for you .the cheap ugg bootsis best christmas gift now.
The information age is really convenient .

Pele said...

the Google Team are doing GREAT !!! people need to realise that you have to learn to walk before you can learn to run, of course this knowledge comes with age.

The Chrome Team are specifically focused on speed and security!!!

they have to make mistakes to make improvements.

Each mistake or error or bug and so on results in great achievements and improvements...

Google Chrome will eventually be the leading web browser well above IE and FF.. Why ? because it is behind and learning from IE and FF browsers flaws - Simple.

Patrik said...
This comment has been removed by the author.
Patrik said...

Well, actually what is more important - speed, or less functionally serious bugs? I would prefer browser which is maybe slower by a few millisecons but it's functional. However Chrome is doing well compared to IE, Safari etc.

M I K O S said...

Just a question...

After Chrome updated today, its version now says:

4.0.249.78 unknown (36714)

Is this normal?

XDRAGON360 said...

Actually, to make Google Chrome faster, open the Task Manager (Windows version) and just set the priority to high.

Hakimy said...

MIKOS,I noticed the same thing and I don't know what that means.anyone can clarify on this?

gcstang said...

How can we get 3.x back 4.x does not work with my GWT application, it seems to cache it and wont' reload the main page. Only way around it is to delete the cache every time which is thoroughly annoying.

screwthepap said...

I got the 'unknown' anomaly in the About screen too.

Pic is worth many words:

http://img39.imageshack.us/
img39/9229/chrome4unknown.png

Chris said...

@Kurtextrem: yes, these fixes should also be in the 4.0.302.2 dev channel version.

Diego said...

Is there an official version of Chrome 64bits?

Blewby said...

With this new version I lost the ability to "Print Selection". The circle is gray'd out and can not be selected. Please fix this as it was in previous versions. (Epson printer)

Asikin said...

On version 4, where is the menu (on version 3) for delete temporary internet, delete cookies, delete history ? And where is the location of temporary internet ?

Kunal A. Desai said...

I recently switched from firefox to chrome.
It's indeed faster.
Thank's for the info. InvestingMantra

XDRAGON360 said...

I don't remember having to choose a 64 bit version for my chrome download.

SES said...

So "Stable" & "Beta" versions are at the same level now? Does that mean we're going to have to do some channel changing when they diverge again?

XDRAGON360 said...

I thought beta was a different version...

SES said...

Normally it is but both versions are at 4.0.249.78 right now. That's why I asked!

Dave said...
This comment has been removed by the author.
Dave said...

Just wondering... Has Chrome always rendered the picture incorrectly on Acid 3 or is it just my computer? All I get is the box saying ACID 3 and 100/100 but there are no colors...
Ok, Just tried it again... It sometimes works but sometimes doesn't.

Viet said...

Any new update for Linux?

Eric said...

The very relevant question should be answered that was asked at least twice, why was the "Clear browsing data" removed from the tools menu?

You guys trying to emulate IE with this step backwards?

Hakimy said...

Eric,what are you taking about? I still have that option.under "personal stuff" in "browsing data".

Mottu Suchi said...

css3 font-face src: url is not working on this site.....

http://www.mathrubhumi.com/

please help me...


@font-face {
font-family: Meera;
src: url("new09/Meera_04-2.ttf");

wpdunn said...

Since I did this update Shock wave flash is crashing all the time! no pandora no Youtube! All works fine in IE. Please fix this issue!

stinebaugh said...

Ctrl+Shift+Delete
Opens the Clear Browsing Data dialog.

The option for this is missing in my Tools section also.

araon said...

Very nice - easy to follow, simple, and working. Thanks for the knowledge!
Pay per click

SES said...

@gcstang: what if you append ?nocache to your URL? Does that work/help?

@everyone that's looking for "Clear browsing data:" Have you looked under Tools, Options, "Personal Stuff" tab, "Browsing data:" section, "Clear browsing data" button? @Eric: Maybe they're *NOT* emulating IE by *NOT* making the same thing available in several different places!

@wpdunn: I've been using this version since it entered beta & have had no problems whatsoever with Flash. Have you tried all the usual things, like clearing cache, etc? Perhaps it scrambled along the way...

gcstang said...

@SES unfortunately no still no luck even with ?nocache, still works great in 3 though so something must have changed.

dennis said...

Uggh. gmail and other (mainly google sites) now hang or are extremely slow.

Åsa K said...

I have used the Embed Gadget (Insert >> More Gadgets >> Featured) to display movies from YouTube in a bigger size in my site created with Google Sites. It worked very well in Google Chrome 3, and also works in Firefox 3 and IE 7-8, but the movies does not display in Google Chrome 4.0.249.78.

For an example, see http://sites.google.com/site/enkateronline/grunderna

dennis said...

Very sad. I now am back to using IE8 since this version of Chrome is completely broken on my system.

Grant said...

Finally...rounded corners that dont look like my dog has chewed on them for a week. Cheers guys, good timing

gcstang said...

Find Bugs get a Bounty

http://www.itworld.com/security/94765/google-pay-bounties-chrome-browser-bugs?source=ITWNLE_nlt_today_2010-02-01

SES said...

Maybe they pushed this version from beta to stable so fast because of all the security fixes included...

gcstang said...

It's secure now since we can't use it.

Fabio Turati said...

@Åsa K: I can reproduce the bug you described. Have you already filed a report?

Åsa K said...

Yes, I reported it at http://www.google.com/support/forum/p/Chrome/thread?fid=3010b9d7e9757c8e00047e8ae127c8e8&hl=en and I hve seen that it is also reported at http://code.google.com/p/chromium/issues/list?can=2&q=embed+gadget&colspec=ID+Stars+Pri+Area+Type+Status+Summary+Modified+Owner+Mstone+OS&x=mstone&y=area&cells=tiles

Gman said...

when will mac users get there stable first chrome... google seems to be biased towards windows... forgetting about linux and mac...

bongobongo said...

This version have some serious issues:

One customer's page started loading insanely slow after installing this version:

Here is a link to my bugreport:
http://code.google.com/p/chromium/issues/detail?id=35207

Hope someone can follow this up ASAP!

StrifeJester said...

I noticed it mentioned ACID3 passing but a clean install at home with all settings at default fails and makes it only to 92 on mine.