Chrome Releases: September 2008

Dev release: 0.2.153.1

Thursday, September 25, 2008

Google Chrome version 0.2.153.1 has been released to Dev channel subscribers ONLY.
About the Dev ChannelThe Dev channel lets you test the latest fixes and get access to new features as they're being developed. We will release new builds to the Dev channel about every week so that you can preview --and provide feedback on-- what's coming in Google Chrome.
You can learn more about the Dev channel and how to subscribe here: http://dev.chromium.org/getting-involved/dev-channel/
Release Highlights

Scrolling with laptop trackpads is fixed (Issue 4).
Check for updates works from the About box (Issue 2362, was broken in Dev channel only).
Removed the separate installer for Gears. Gears is now installed as a versioned component in the same directory as Google Chrome.
You can now add words to the spellcheck dictionary. Right-click a misspelled word and choose 'Add to dictionary...'

A more complete list of changes can be found here: http://dev.chromium.org/getting-involved/dev-channel/release-notes

--Mark Larson, Google Chrome Program Manager

Beta release: 0.2.149.30

Thursday, September 18, 2008

Google Chrome version 0.2.149.30 was released on 17 September 2008. Users will get automatic updates over the next few days.

Security Updates

[r2042] Fix a potential denial of service with very long title attributes on tags. The title attribute sets the tooltip text when you hover the mouse over an element.
Security Rating: Low risk. This can lead to 100% CPU usage or a tab crash.
More information: http://www.securityfocus.com/bid/30975

Other Changes

[r1927] Stop adding content from HTTPS sites to the searchable index.
Google Chrome keeps a searchable history of pages you visit. This history is only stored locally on your computer. Previously, this searchable history included the text from secure sites, such as your online bank (any sites using SSL for security). Google Chrome no longer saves text from secure pages in its local history. The address bar and local history search page will no longer find data from secure sites you have visited.

If you are concerned about data that might have been indexed for searching before this release, you can follow the Google Chrome Help Center instructions for clearing your browsing history.

[r1978] Don't send sensitive URLs to search suggest services. Google Chrome stops sending data to a suggest service if the typed URL:

contains a username:password field (http://username:password@example.com/)
has query parameters (the trailing ?param=data following the URL)
is an https URL with any path component (any part following the hostname, such as /path in https://www.example.com/path)

[r1848, r1943, r2003] Fixes to the Google Chrome updater to make updates more reliable.

[r1859] Fix problems with Flash not playing video if too many connections are opened. For example, using the slider to advance video on YouTube could cause video to stop playing.

[r2059] Allow JavaScript to communicate with Java applets. Fixes bug 580.

[r1299] JavaScript: Dispatch contextmenu events after mouseup events. This fixes the right-click menu not working on Google Spreadsheets. Fixes bug 745.

[r1692] Fix crashes with some plugins --3dvia was the most widely reported-- when they return an error for NPN_GetValue. Fixes bug 493.

Beta release: 0.2.149.29

Monday, September 8, 2008

Google Chrome version 0.2.149.29 was released on 5 September 2008, and all users are being automatically updated. Automatic updates are a key security feature in helping to ensure the safety of Google Chrome users.

This is a security and bug fix update, with no new functionality.

Security Updates:

Fix a buffer overflow vulnerability in handling long filenames that display in the Save As... dialog. This is a critical risk that could lead to execution of arbitrary code.

Fix a buffer overflow vulnerability in handling link targets displayed in the status area when the user hovers over a link. This is a critical risk that could lead to execution of arbitrary code.

Fix an out-of-bounds memory read when parsing URLs ending with :%. This is a low risk that can be used to crash the entire browser, possibly causing loss of data in the current session.

Issue: http://code.google.com/p/chromium/issues/detail?id=122
Fix: http://src.chromium.org/viewvc/chrome?view=rev&revision=1760

Change the default Downloads directory if it is set to Desktop, and ensure that Desktop cannot be the default. This mitigates the risk of malicious cluttering of the desktop with unwanted downloads, which can lead to executing unwanted files.

Fix: http://src.chromium.org/viewvc/chrome?view=rev&revision=1793

Other changes:

Fix a couple of data transfer issues with the Safe Browsing service causing unnecessary traffic.

Fix: http://src.chromium.org/viewvc/chrome?view=rev&revision=1762

Fix a JavaScript bug that affected facebook.com. The fix properly handles negative indicies when using for...in.

Issue: http://code.google.com/p/chromium/issues/detail?id=131

Fix: http://src.chromium.org/viewvc/chrome?view=rev&revision=1763

Fix search suggestions not working properly for http://search.daum.net/, http://search.empas.com/, http://meta.ua/, http://search.naver.com/, and http://search.yahoo.com/ on several non-United States sites.

Fix: http://src.chromium.org/viewvc/chrome?view=rev&revision=1759

Chrome Releases

Dev release: 0.2.153.1

Beta release: 0.2.149.30

Beta release: 0.2.149.29

Labels

Archive