Thursday, September 30, 2010

Beta Channel Update

The Beta channel has been updated to 7.0.517.24 for Windows, Mac, Linux and Chrome Frame.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Dev Channel Update

The Dev channel has been updated to 7.0.536.2 for Windows, Mac, Linux and Chrome Frame

All
  • Fixed saving passwords containing non-ASCII characters (Issue 54065).
  • Accelerated compositing and support for 3D CSS transforms enabled by default (Issue 54469)
  • WebGL support enabled by default (Issue 54469)
  • Regression fix: keep the download shelf visible when multiple sites are saved. (Issue 54149)
  • Add a lab for the Page Info Bubble for Windows and Linux; Mac coming shortly.
Windows
  • Fixed a problem with context menus where the presence of extension-added items prevented keyboard accelerators from working. (Issue: 54497)
Mac
  • More keyboard shortcuts for Tab Overview.(Issue 52834)
  • Add sqlite and javascript memory columns to task manager
Linux
  • Add javascript memory column to task manager
  • Make compile-time dependency on gnome-keyring optional
  • Resolved problems accessing FTP sites (Issue 54395)
Known Issues
  • Problems downloading some attachments in hotmail: Issue 57334
More details about additional changes are available in the log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.



If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Karen Grunberg
Google Chrome

Tuesday, September 28, 2010

Dev Channel Update

The Dev channel has been updated to 7.0.517.24 for Windows, Mac, Linux and Chrome Frame.

This release focused on resolving minor bug fixes or crashes. More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Friday, September 24, 2010

Dev Channel Update

The Dev channel has been updated to 7.0.517.17 for Windows, and 7.0.517.13 for Mac and Linux.

This release focused on resolving minor bug fixes or crashes. More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Wednesday, September 22, 2010

Stable and Beta Channel Updates

Google Chrome has been updated to 6.0.472.63 for all platforms on the Stable and Beta channels.  This version contains a fix in V8 for direct loading of global function prototypes [V8 r5483].  


More details about additional changes are available in the SVN revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel? Find out how.


Jason Kersey
Google Chrome

Friday, September 17, 2010

Stable, Beta Channel Updates

Google Chrome has been updated to 6.0.472.62 for Windows, Linux and Mac on the Stable channel. In addition, all of the above plus Chrome Frame have been updated on the Beta channel.


Along with the security fixes listed below, this version includes an updated version of the Flash Plugin with a fix for a security vulnerability.

Security fixes and rewards
Please see
the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [$500] [55114] High Bad cast with malformed SVG. Credit to wushi of team 509.
  • [55119] Critical Buffer mismanagement in the SPDY protocol. Credit to Ron Ten-Hove of Google.
  • [$1000] [55350] High Cross-origin property pollution. Credit to Stefano Di Paola of MindedSecurity.
More details about additional changes are available in the SVN revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel - find out how.


Jason Kersey
Google Chrome

Thursday, September 16, 2010

Dev Channel Update

The Dev channel has been updated to 7.0.517.8 for Windows, Mac, Linux, and ChromeFrame.

This release focused on resolving minor bug fixes or crashes. More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Tuesday, September 14, 2010

Stable, Beta Channel Updates

Google Chrome 6.0.472.59 has been released to the Stable and Beta channels for Windows, Mac, and Linux.  In addition, it has been released to the beta channel for Chrome Frame.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [$500] [50250] High Use-after-free when using document APIs during parse. Credit to David Weston of Microsoft + Microsoft Vulnerability Research (MSVR) and wushi of team 509 (independent discoveries).
  • [$1000] [50712] High Use-after-free in SVG styles. Credit to kuzzcc.
  • [$500] [51252] High Use-after-free with nested SVG elements. Credit to kuzzcc.
  • [Linux only] [51709] Low Possible browser assert in cursor handling. Credit to “magnusmorton”.
  • [$500] [51919] High Race condition in console handling. Credit to kuzzcc.
  • [53176] Low Unlikely browser crash in pop-up blocking. Credit to kuzzcc.
  • [$500 x 2] [Mac only] [53361] Critical Fix bug 45400 properly on the Mac. Credit to Sergey Glazunov and “remy.saissy”.
  • [$500] [53394] High Memory corruption in Geolocation. Credit to kuzzcc.
  • [Linux only] [53930] High Memory corruption in Khmer handling. Credit to Google Chrome Security Team (Chris Evans).
  • [54006] Low Failure to prompt for extension history access. Credit to “adriennefelt”.

More details about additional changes are available in the svn revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel - find out how.

Jason Kersey
Google Chrome

Wednesday, September 8, 2010

Dev Channel Update

Update: 7.0.517.5 has been release for all platforms including Mac (new feature for Mac inline in the blog post).

The Dev channel has been updated to 7.0.517.0 for Windows, Linux, and ChromeFrame.

All
  • about:labs (Issue: 53399)
  • Fewer wstrings in the bookmark code!
  • Problems visiting http://localhost in various network configurations should be resolved (Issues: 42058, 49024, 32522).
Windows
  • See All
Mac
  • Support for Services (Issue 20868)
  • Support for AppleScript (Issue 27468)
  • Find bar and fullscreen overlay are now drawn correctly on top of plugins that use the CoreAnimation drawing model (Issue 44087)
  • Remove superfluous Console logging (Issue 26621)
Linux
  • [r58011] [phajdan.jr@chromium.org] [OS-LINUX] Issue 29333 - use_system_xml causes many sites to fail to load
  • Remove libxml hack that is not needed after we rolled in the WebKit fix (Issue: 29333)
  • [r58449] Fix default browser selection on KDE 4 on many RPM-based distributions. (Issue 33842)
Known Issues
  • Certain actions on YouTube fail, such as "Like" (Issue: 54424)
More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Tuesday, September 7, 2010

Stable, Beta Channel Updates

The Stable and Beta channels of Chrome have been updated to 6.0.472.55 for Windows, Mac, and Linux (Update: Chrome Frame is also now updated to this version on the Beta channel). This version contains the following fixes:

All
Windows
  • [r58190] Importing data from other browsers when chrome is set as default  (bug 53655)
  • [r58288] Chrome can’t be made default browser when it already exists (bug 53656)
More details about additional changes are available in the svn revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel - find out how.

Jason Kersey
Google Chrome

Thursday, September 2, 2010

Stable and Beta Channel Updates

Google Chrome 6.0.472.53 has been released to the stable and beta channels for Windows, Mac, and Linux.  Updates from the previous stable release include:
  • Updated UI
  • Form Autofill
  • Syncing of extensions and Autofill data
  • Increased speed and stability
More information on these and other changes in Chrome 6 can be found on the Google Chrome blog. Download Chrome today!

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [34414] Low Pop-up blocker bypass with blank frame target. Credit to Google Chrome Security Team (Inferno) and “ironfist99”.
  • [37201] Medium URL bar visual spoofing with homographic sequences. Credit to Chris Weber of Casaba Security.
  • [41654] Medium Apply more restrictions on setting clipboard content. Credit to Brook Novak.
  • [45659] High Stale pointer with SVG filters. Credit to Tavis Ormandy of the Google Security Team.
  • [45876] Medium Possible installed extension enumeration. Credit to Lostmon.
  • [46750] [51846] Low Browser NULL crash with WebSockets. Credit to Google Chrome Security Team (SkyLined), Google Chrome Security Team (Justin Schuh) and Keith Campbell.
  • [$1000] [50386] High Use-after-free in Notifications presenter. Credit to Sergey Glazunov.
  • [50839] High Notification permissions memory corruption. Credit to Michal Zalewski of the Google Security Team and Google Chrome Security Team (SkyLined).
  • [$1337] [51630] [51739] High Integer errors in WebSockets. Credit to Keith Campbell and Google Chrome Security Team (Cris Neckar).
  • [$500] [51653] High Memory corruption with counter nodes. Credit to kuzzcc.
  • [51727] Low Avoid storing excessive autocomplete entries. Credit to Google Chrome Security Team (Inferno).
  • [52443] High Stale pointer in focus handling. Credit to VUPEN Vulnerability Research Team (VUPEN-SR-2010-249).
  • [$1000] [52682] High Sandbox parameter deserialization error. Credit to Ashutosh Mehra and Vineet Batra of the Adobe Reader Sandbox Team.
  • [$500] [53001] Medium Cross-origin image theft. Credit to Isaac Dawson.
This release also fixes [51070] (Windows kernel bug workaround; credit to Marc Schoenefeld), which was incorrectly declared fixed in version 5.0.375.127.

In addition, we would like to credit Google Chrome Security Team (Inferno), James Robinson (Chromium development community), Google Chrome Security Team (Cris Neckar), Aki Helin of OUSPG, Fred Akalin (Chromium development community), Anna Popivanova, “myusualnickname”, Michal Zalewski of the Google Security Team, kuzzcc and Aaron Boodman (Chromium development community) for finding bugs during the development cycle such that they never reached a stable build.

If you find new issues, please let us know by filing a bug.   If you would like to use the stable channel, you can find out more about changing your Chrome channel

Jason Kersey
Google Chrome