Chrome Releases
Release updates from the Chrome team
Stable Channel Release
Tuesday, July 31, 2012
The Chrome team is excited to announce the release of Chrome 21 to the Stable Channel.
21.0.1180.57
for Mac and Linux. 21.0.1180.60 for
Windows
and Chrome Frame. Chrome 21 contains a number of new features including a new API for
high-quality video and audio communication
.
More detailed updates are available on the
Chrome Blog
.
Security fixes and rewards:
Please see
the Chromium security page
for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
[Linux only] [
125225
]
Medium
CVE-2012-2846: Cross-process interference in renderers.
Credit to Google Chrome Security Team (Julien Tinnes).
[
127522
]
Low
CVE-2012-2847: Missing re-prompt to user upon excessive downloads.
Credit to Matt Austin of Aspect Security.
[
127525
]
Medium
CVE-2012-2848: Overly broad file access granted after drag+drop.
Credit to Matt Austin of Aspect Security.
[
128163
]
Low
CVE-2012-2849: Off-by-one read in GIF decoder.
Credit to Atte Kettunen of OUSPG.
[
130251
] [
130592
] [
130611
] [
131068
] [
131237
] [
131252
] [
131621
] [
131690
] [
132860
]
Medium
CVE-2012-2850: Various lower severity issues in the PDF viewer.
Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[
132585
] [
132694
] [
132861
]
High
CVE-2012-2851: Integer overflows in PDF viewer.
Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[
134028
]
High
CVE-2012-2852: Use-after-free with bad object linkage in PDF.
Credit to Alexey Samsonov of Google.
[
134101
]
Medium
CVE-2012-2853: webRequest can interfere with the Chrome Web Store.
Credit to Trev of Adblock.
[
134519
]
Low
CVE-2012-2854: Leak of pointer values to WebUI renderers.
Credit to Nasko Oskov of the Chromium development community.
[
134888
]
High
CVE-2012-2855: Use-after-free in PDF viewer.
Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[
134954
] [
135264
]
High
CVE-2012-2856: Out-of-bounds writes in PDF viewer.
Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[$
1000
] [
136235
]
High
CVE-2012-2857: Use-after-free in CSS DOM.
Credit to Arthur Gerkis.
[$
1000
] [
136894
]
High
CVE-2012-2858: Buffer overflow in WebP decoder.
Credit to Jüri Aedla.
[Linux only] [
137541
]
Critical
CVE-2012-2859: Crash in tab handling.
Credit to Jeff Roberts of Google Security Team.
[
137671
]
Medium
CVE-2012-2860: Out-of-bounds access when clicking in date picker.
Credit to Chamal de Silva.
Many of the above bugs were detected using
AddressSanitizer
.
We’d also like to thank Drew Yao / Braden Thomas / Jim Smith (all Apple Product Security), Kostya Serebryany of the Chromium development community, Atte Kettunen of OUSPG and Bernhard Bauer of the Chromium development community for working with us during the development cycle and preventing security regressions from ever reaching the stable channel.
Full details about what changes are in this release are available in the
SVN revision log
. Interested in hopping on the stable channel?
Find out how
. If you find a new issue, please let us know by
filing a bug
.
Karen Grunberg
Google Chrome
Labels
Admin Console
43
Android WebView
19
Beta
21
Beta update
4
Beta updates
1994
chrome
15
Chrome Dev for Android
122
Chrome for Android
926
Chrome for iOS
364
Chrome for Meetings
5
Chrome OS
1149
Chrome OS Flex
22
Chrome OS Management
12
Chromecast Update
6
ChromeOS
195
ChromeOS Flex
192
Desktop Update
1086
dev update
266
Dev updates
1491
Early Stable Updates
47
Extended Stable updates
122
Flash Player update
5
Flex
1
Hangouts Meet hardware
5
LTS
84
stable
9
Stable updates
1216
Archive
2024
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2023
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2022
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Give us feedback in our
Product Forums
.