Chrome Releases

Chrome Stable Release

Wednesday, January 12, 2011

Chrome on stable channel has been updated to 8.0.552.237 for all platforms. Chrome OS has also been updated, to 8.0.552.334. These releases contain the security fixes listed below.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

We’re delighted to offer our first “elite” $3133.7 Chromium Security Reward to Sergey Glazunov. Critical bugs are harder to come by in Chrome, but Sergey has done it. Sergey also collects a $1337 reward and several other rewards at the same time, so congratulations Sergey!

Also of note is a clarification on our default charity policy. Some researchers are unable to accept rewards, or even provide a suggestion for a charity. In such cases, it feels like a shame to lose a charitable contribution so we will default reward money to the Red Cross.

[58053] Medium Browser crash in extensions notification handling. Credit to Eric Roman of the Chromium development community.
[$1337] [65764] High Bad pointer handling in node iteration. Credit to Sergey Glazunov.
[66334] High Crashes when printing multi-page PDFs. Credit to Google Chrome Security Team (Chris Evans).
[$1000] [66560] High Stale pointer with CSS + canvas. Credit to Sergey Glazunov.
[$500] [66748] High Stale pointer with CSS + cursors. Credit to Jan Tošovský.
[67100] High Use after free in PDF page handling. Credit to Google Chrome Security Team (Chris Evans).
[$1000] [67208] High Stack corruption after PDF out-of-memory condition. Credit to Jared Allar of CERT.
[$1000] [67303] High Bad memory access with mismatched video frame sizes. Credit to Aki Helin of OUSPG; plus independent discovery by Google Chrome Security Team (SkyLined) and David Warren of CERT.
[$500] [67363] High Stale pointer with SVG use element. Credited anonymously; plus indepdent discovery by miaubiz.
[$1000] [67393] Medium Uninitialized pointer in the browser triggered by rogue extension. Credit to kuzzcc.
[$1000] [68115] High Vorbis decoder buffer overflows. Credit to David Warren of CERT.
[$1000] [68170] High Buffer overflow in PDF shading. Credit to Aki Helin of OUSPG.
[$1000] [68178] High Bad cast in anchor handling. Credit to Sergey Glazunov.
[$1000] [68181] High Bad cast in video handling. Credit to Sergey Glazunov.
[$1000] [68439] High Stale rendering node after DOM node removal. Credit to Martin Barbella; plus independent discovery by Google Chrome Security Team (SkyLined).
[$3133.7] [68666] Critical Stale pointer in speech handling. Credit to Sergey Glazunov.

Full details about the Chrome changes are available in the SVN revision log. If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel? Find out how.

Jason Kersey
Google Chrome

Dev Channel Update

Tuesday, January 11, 2011

All

Updated V8 - 3.0.6.1

Chrome no longer says "restart required" when there's no update (Issue 67478)

Known Issues

Clear browsing data settings in DOMUI options does not work (Issue 69163)

log of all revisions.http://dev.chromium.org/getting-involved/dev-channelhttp://code.google.com/p/chromium/issues/entry

Beta Channel Update

Monday, January 10, 2011

The Beta channel has been updated to 9.0.597.47 for Windows.
Flash Player sandboxing has been restored for all platforms but XP as has accelerated composting and WebGL.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Beta Update

Thursday, January 6, 2011

The Beta channel has been updated to 9.0.597.45 for Windows, Linux and Chrome Frame.
Flash Player sandboxing has been restored, and accelerated composting and WebGL have been moved behind flags temporarily: --enable-accelerated-compositing and --enable-webgl respectively.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Dev Channel Update

Wednesday, January 5, 2011

All

Updated V8 - 3.0.4.1

Updated WebKit - 534.16

Eliminated crash on shutdown after “Clear All Downloads” (Issue 66676)

Known Issues

NaCl SDK - Apps are not working (Issue 62570)

log of all revisions.http://dev.chromium.org/getting-involved/dev-channelhttp://code.google.com/p/chromium/issues/entry

Beta Channel Update

Wednesday, January 5, 2011

The Beta channel has been updated to 9.0.597.44 for Windows, Mac, Linux and Chrome Frame.
Flash Player sandboxing has been temporarily moved behind a flag --enable-flash-sandbox.
If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Beta Channel Update

Tuesday, January 4, 2011

The Beta channel has been updated to 9.0.597.42 for Windows, Mac, Linux and Chrome Frame.
More details about additional changes are available in the svn log of all revision.
If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

Chrome Releases

Chrome Stable Release

Dev Channel Update

Beta Channel Update

Beta Update

Dev Channel Update

Beta Channel Update

Beta Channel Update

Labels

Archive