Monday, March 31, 2014

Dev Channel Update

The Dev Channel has been updated to 35.0.1916.6 for Windows, Mac and Linux

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Thursday, March 27, 2014

Chrome for iOS Update

Chrome for iOS has been updated to 33.0.1750.21. This release contains bug fixes and stability improvements. The update will be rolling out in the App Store over the next few hours. Known issues are available on the Chrome support site. If you find a new issue, please let us know by filing a bug.

Jason Kersey
Google Chrome

Labels:

Dev Channel Update

The Dev Channel has been updated to 35.0.1912.2 for Windows, Mac and Linux

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Wednesday, March 26, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 34.0.1847.92 (Platform version: 5500.83.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,

Chrome for Android Update

Chrome for Android has been updated to 33.0.1750.170 and will be available in Google Play over the next few days. This release contains bug and stability fixes. A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Chrome Beta for Android Update

Chrome Beta for Android has been updated to 34.0.1847.99 and will be available in Google Play over the next few hours. This release fixes a number of bugs, including many crash fixes. A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Dev Channel Update for Chrome OS

The Dev channel has been updated to 35.0.1905.3 (Platform version: 5680.3.0/5680.4.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

Labels: ,

Beta Channel Update

The Beta Channel has been updated to 34.0.1847.92 for Windows, Mac and Linux.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Daniel Xie
Google Chrome

Labels:

Tuesday, March 25, 2014

Admin Console Update

The Admin console has been updated. This update introduces a new device policy to enable recent user tracking on enrolled devices. The policy is disabled by default.

Known issues are available here. Enterprise customers can report an issue by contacting support.

Lawrence Lui
Google Chrome

Labels:

Dev Channel Update

The Dev Channel has been updated to 35.0.1908.4 for Windows, Mac and Linux

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Thursday, March 20, 2014

Dev Channel Update

The Dev Channel has been updated to 35.0.1897.8 for Mac

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Wednesday, March 19, 2014

Chrome Beta for Android

Chrome Beta for Android has been updated to 34.0.1847.76 and will be available in Google Play over the next few hours. This release has a number of crash fixes as well as the following fixes:
  • 350040: Black tabs displayed in tabswitcher mode
  • 343142: Corrupted / blurry text in tabswitcher
  • 350952: [Accessibility] Audio feedback for the 'Open tab' icon is broken
  • 336615: android on-screen keyboard always slides up into white
  • 347121: Broken glyph rendering when HTML lang attribute is set to some CJK language and a font-family CSS rule is set
  • 311889: ubercomp doesn't clip correctly in Chrome for Android tab switcher
A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Beta Channel Update for Chrome OS

The Beta channel has been updated to 34.0.1847.76 (Platform version: 5500.71.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,

Beta Channel Update

The Beta Channel has been updated to 34.0.1847.76 for Windows, Mac and Linux.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Daniel Xie
Google Chrome

Labels:

Tuesday, March 18, 2014

Dev Channel Update

The Dev Channel has been updated to 35.0.1897.2 for Windows and Linux and 35.0.1897.3 for Mac

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Friday, March 14, 2014

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.152 for Mac and Linux and 33.0.1750.154 for Windows.

Security Fixes and Rewards

Congratulations to VUPEN and an Anonymous submission for winning the Pwn2Own competition.
  • [$100,000] [352369] Code execution outside sandbox. Credit to VUPEN.
    • [352374] High CVE-2014-1713: Use-after-free in Blink bindings
    • [352395] High CVE-2014-1714: Windows clipboard vulnerability
  • [$60,000] [352420] Code execution outside sandbox. Credit to Anonymous.
    • [351787] High CVE-2014-1705: Memory corruption in V8
    • [352429] High CVE-2014-1715: Directory traversal issue

We’re delighted at the success of Pwn2Own and the ability to study full exploits. We anticipate landing additional changes and hardening measures for these vulnerabilities in the near future. We also believe that both submissions are works of art and deserve wider sharing and recognition. We plan to do technical reports on both Pwn2Own submissions in the future.

Interested in hopping on the stable channel? Find out how. If you find a new issue, please let us know by filing a bug.

Anthony Laforge
Google Chrome

Labels:

Chrome for Android Update

Chrome for Android has been updated to 33.0.1750.166 and will be available in Google Play over the next few days. This update includes bugs we received from security researchers attending CanSecWest 2014:
  • [351787] High CVE-2014-1705: Memory corruption in V8. Credit to GeoHot and Anonymous.
  • [351852] High CVE-2014-1710: Memory corruption in GPU command buffer. Credit to Pinkie Pie.
  • [352374] High CVE-2014-1713: Use-after-free in bindings. Credit to VUPEN.
A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Stable Channel Update for Chrome OS

The Stable channel has been updated to 33.0.1750.152 (Platform version: 5116.115.4/5116.115.5) for all devices. This build contains security fixes for Pwnium. Systems will be receiving the updates over the next few days.

Security Fixes and Rewards

Congratulations to geohot for an epic Pwnium competition win. Pinkie Pie provided a fascinating set of vulnerabilities that will be rewarded through the Chrome VRP program. Moreover, one of the bugs exploited by VUPEN on Pwn2Own affected Chrome OS.

We’re delighted at the success of Pwnium and the ability to study full exploits. We anticipate landing additional changes and hardening measures for these vulnerabilities in the near future. We also believe that both Pwnium submissions are works of art and deserve wider sharing and recognition. We plan to do technical reports on these submissions in the future.
  • [Like a c-c-c-c-hamp!!! $150,000] [351788] Persistent code execution on Chrome OS. Credit to geohot.
    • [351787] High CVE-2014-1705: Memory corruption in V8
    • [351796] Low CVE-2014-1706: Command Injection in Crosh
    • [351811] High CVE-2014-1707: Path traversal issue in CrosDisks
    • [344051] Critical CVE-2014-1708: Issue with file persistence at boot
  • [$TBD] [352492] Sandboxed code execution and kernel OOB write. Credit to Pinkie Pie.
    • [351852] High CVE-2014-1710: Memory corruption in GPU command buffer
    • [351855] High CVE-2014-1711: Kernel OOB write in GPU driver
  • [352374] High CVE-2014-1713: Use-after-free in Blink bindings. Credit to VUPEN.

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

Labels: ,

Thursday, March 13, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 34.0.1847.60 (Platform version: 5500.55.0) for all Chrome OS devices except for the Chromebook Pixel. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,

Wednesday, March 12, 2014

Chrome Beta for Android Update

Chrome Beta for Android has been updated to 34.0.1847.62 and will be available in Google Play over the next few hours. This release contains stability improvements. A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Beta Channel Update

The Beta Channel has been updated to 34.0.1847.60 for Windows, Mac and Linux.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Daniel Xie
Google Chrome

Labels:

Tuesday, March 11, 2014

Dev Channel Update for Chrome OS

The Dev channel has been updated to 35.0.1883.2 (Platform version: 5619.0.0/5620.0.0) for all Chrome OS devices except CR48. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

Labels: ,

Admin Console Update

The Admin console has been updated. This update brings the option to add ethernet configurations. There is also a new device policy to enable or disable verified access for content protection, which can attest to content providers that a device is in verified boot mode.

Known issues are available here. Enterprise customers can report an issue by contacting support.

Lawrence Lui
Google Chrome

Labels:

Dev Channel Update

The Dev Channel has been updated to 35.0.1883.0 for Windows, Mac, and Linux

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Stable Channel Update for Chrome OS

The Stable channel has been updated to 33.0.1750.149 (Platform version: 5116.113.0/5116.114.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the Chromium changelist. Systems will be receiving updates over the next several days.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

Labels: ,

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.149 for Windows, Mac, and Linux.

This release also contains a Flash Player update, to version 12.0.0.77.

Security Fixes and Rewards

This update includes 7 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

[$4000][344881] High CVE-2014-1700: Use-after-free in speech. Credit to Chamal de Silva.
[$3000][342618] High CVE-2014-1701: UXSS in events. Credit to aidanhs.
[$1000][333058] High CVE-2014-1702: Use-after-free in web database. Credit to Collin Payne.

As usual, our ongoing internal security work responsible for a wide range of fixes:

[338354] High CVE-2014-1703: Potential sandbox escape due to a use-after-free in web sockets.
[328202, 349079, 345715] CVE-2014-1704: Multiple vulnerabilities in V8 fixed in version 3.23.17.18.

Many of the above bugs were detected using AddressSanitizer.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.

Anthony Laforge
Google Chrome

Labels:

Monday, March 10, 2014

Chrome for iOS Update

Chrome for iOS has bee updated to 33.0.1750.15. This release contains bug fixes and stability improvements. The update will be rolling out in the App Store over the next few hours. Known issues are available on the Chrome support site. If you find a new issue, please let us know by filing a bug.

Jason Kersey
Google Chrome

Labels:

Thursday, March 6, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 34.0.1847.48 (Platform version: 5500.44.0) for all Chrome OS devices except for the Lenovo Thinkpad X131e. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,

Wednesday, March 5, 2014

Dev Channel Update for Chrome OS

The Dev channel has been updated to 35.0.1870.0 (Platform version: 5576.1.0/5576.4.0/5576.5.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Dharani Govindan
Google Chrome

Labels: ,

Chrome Beta for Android Update

Chrome Beta for Android has been updated to 34.0.1847.45 and will be available in Google Play over the next few hours. This release contains stability and performance improvements as well as the following fixes.
  • 341867: [Tab Switcher] Tab stack view is broken on suspend/quit and relaunching the application
  • 325849: Visual glitch in location bar during startup
  • 342857: Interaction of TopControls allows scrolling outside a page's bounds
Known issues:
  • 344973: Black background sometimes when opening new normal/incognito tabs
  • 343142: Corrupted / blurry text in tabswitcher
A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Beta Channel Update

The Beta Channel has been updated to 34.0.1847.45 for Windows, Mac and Linux.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Daniel Xie
Google Chrome

Labels:

Tuesday, March 4, 2014

Dev Channel Update

The Dev Channel has been updated to 35.0.1870.2 for Windows, Mac and Linux

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Karen Grünberg
Google Chrome

Labels:

Monday, March 3, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 34.0.1847.38 (Platform version: 5500.26.0 or 5500.26.1) for all Chrome OS devices except for the Samsung Chromebook. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

Edited 8:36pm 3/4/2014:
Some highlights of these changes are:
  • Voice search is now enabled within the launcher. Simply open the launcher and and say, “OK Google” to use it. 
  • Side dock which allows users to dock small windows and panels to screen edges. Windows are all automatically managed in this mode.
  • Turned Google Drive offline backup on by default after first login.
  • Sticky keys, which allows you to perform keyboard shortcuts / mouse+keyboard gestures by pressing the keys in sequence instead of simultaneously.
  • Onscreen keyboard, which allows you to type and use device features (top row) with a pointing device.
If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,

Chrome Beta for Android Update

The Chrome Team is excited to announce the beta release of Chrome 34 for Android. Chrome 34.0.1847.36 will be available in Google Play over the next few hours. This release contains crash fixes and performance improvements including battery usage optimizations. A partial list of changes in this build is available in the SVN revision log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Jason Kersey
Google Chrome

Labels:

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.146 for Windows, Mac, and Linux.

Security Fixes and Rewards

This update includes 19 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

[$1000][344492] High CVE-2013-6663: Use-after-free in svg images. Credit to Atte Kettunen of OUSPG.
[$500][326854] High CVE-2013-6664: Use-after-free in speech recognition. Credit to Khalil Zhani.
[$2000][337882] High CVE-2013-6665: Heap buffer overflow in software rendering. Credit to cloudfuzzer.
[332023] Medium CVE-2013-6666: Chrome allows requests in flash header request. Credit to netfuzzerr.

As usual, our ongoing internal security work responsible for a wide range of fixes:

[348175] CVE-2013-6667: Various fixes from internal audits, fuzzing and other initiatives.
[343964, 344186, 347909] CVE-2013-6668: Multiple vulnerabilities in V8 fixed in version 3.24.35.10.

Many of the above bugs were detected using AddressSanitizer.

This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.

Anthony Laforge
Google Chrome

Labels:

Saturday, March 1, 2014

Dev Channel Update for Chrome OS

The Dev channel has been updated to 34.0.1847.38 (Platform version: 5500.26.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium changelog.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Matthew Yuan
Google Chrome

Labels: ,