Chrome Releases: Stable Channel Update

Chrome Releases

Release updates from the Chrome team

Stable Channel Update

Monday, January 25, 2010

The stable channel has been updated to 4.0.249.78 for Windows, and includes the following features and security fixes (since 3.0):

Extensions

Bookmark sync

Enhanced developer tools

HTML5: Notifications, Web Database, Local Storage, WebSockets, Ruby support

v8 performance improvements

Skia performance improvements

Full ACID3 pass, due to re-enabled remote font support (with added defense against bugs in operating system font libraries)

HTTP byte range support

New security feature: "Strict Transport Security" support

Experimental new anti-reflected-XSS feature called "XSS Auditor"

Security Fixes:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[3275] Low Pop-up blocker bypass. Credit to Google Chrome Security Team (SkyLined).

[9877] Medium Cross-domain theft due to CSS design error. Credit to Chris Evans of the Google Security Team.

[12523] Medium Browser memory error with stale pop-up block menu. Credit to Jacob Balle and Carsten Eiram, Secunia Research.

[20450] Low Prevent XHR to directories. Credit to the Chromium development community.

[23693] Low Escape more characters in shortcuts. Credit to Michal Zalewski of the Google Security Team and, independently, Inferno of SecureThoughts.com.

[8864] [24701] [24646] High Renderer memory errors drawing on canvases. Credit to Michal Zalewski of the Google Security Team and Google Chrome Security Team (SkyLined).

[28566] High Image decoding memory error. Credit to Robert Swiecki of the Google Security Team.

[29920] Low Corner case failure to strip Referer. Credit to the Chromium development community.

[30660] High Cross-domain access error. Credit to Tokuji Akamine, Senior Consultant at Symantec Consulting Services.

[31307] High Bitmap deserialization error. Credit to Mark Dowd, under contract to Google Chrome Security Team.

[31517] Low Browser crash with nested URL.

Anthony LaforgeGoogle Chrome Program Manager

Labels: Stable updates

Labels

Admin Console 43
Android WebView 19
Beta 21
Beta update 4
Beta updates 2024
chrome 15
Chrome Dev for Android 130
Chrome for Android 951
Chrome for iOS 381
Chrome for Meetings 5
Chrome OS 1149
Chrome OS Flex 22
Chrome OS Management 12
Chromecast Update 6
ChromeOS 211
ChromeOS Flex 208
Desktop Update 1117
dev update 266
Dev updates 1508
Early Stable Updates 49
Extended Stable updates 130
Flash Player update 5
Flex 1
Hangouts Meet hardware 5
LTS 88
stable 11
Stable updates 1247

Archive

2024
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2023
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2022
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2021
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2020
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2019
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2018
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2017
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2016
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2015
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2014
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2013
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2012
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2011
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2010
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2009
- Dec
- Nov
- Oct
- Sep
- Aug
- Jul
- Jun
- May
- Apr
- Mar
- Feb
- Jan

2008
- Dec
- Nov
- Oct
- Sep

Give us feedback in our
Product Forums.

Google
Privacy
Terms