Chrome Releases

Stable Channel Update

Thursday, November 5, 2009

The stable channel has been updated to 3.0.195.32, and includes the following security and stability fixes:

Resolved a history issue that affected going back from queries in Google Maps. (Issue: 21353)
Fixed issue with Adobe Acrobat Reader 9.2, where no content would be displayed. (Issue: 24883)
Fixed an infinite loop in AAC decoding. (Webkit Issue: 27239)
Fixed a top crasher. (Issue: 22205)
Fix issues where setInterval sometimes eats 100% CPU. (Issue: 25892)

Security Fixes:

CVE-2009-XXXX User not warned for some file types that can execute JavaScript

The user was not warned about certain possibly dangerous file types such as SVG, MHT and XML files. In some browsers, JavaScript can execute within these types of files. Because the JavaScript runs in the local context, it may be able to access local resources.

More info: http://code.google.com/p/chromium/issues/detail?id=23979
(This issue will be made public once a majority of users are up to date with the fix.)

Severity: Medium
Credit: Inferno of SecureThoughts.com
Mitigations:

A victim would need to visit a page under an attacker's control.
The victim would furthermore need to open a malicious file.

CVE-2009-XXXX Possible memory corruption in the Gears plugin

A malicious site could use the Gears SQL API to put SQL metadata into a bad state, which could cause a subsequent memory corruption. This may lead to a Gears plugin crash or possibly arbitrary code execution.

More info: http://code.google.com/p/chromium/issues/detail?id=26179
(This issue will be made public once a majority of users are up to date with the fix.)

Severity: High
Credit: This issue was found by the Google Chrome security team.
Mitigations:

A victim would need to visit a page under an attacker's control.
The victim would furthermore need to "click-through" the Gears dialog confirming that they trust the attacker's evil page.

Anthony Laforge

Google Chrome Program Manager

Dev Channel Updated with UI improvements for Mac

Wednesday, November 4, 2009

This release is Mac OS X only and includes a number of UI improvements.

Version: 4.0.229.1

All,

[r30050] Use new renderer process for cross-site links with rel=noreferrer and target=_blank (Issue: 24447).
[r29848] Video/audio tags now support data:// protocol (Issue: 24357).

Mac

[r29121] Show "Loading" bubble while loading a theme. (Issue: 22219).
[r29229, r29270, r29396, r29458, r29660, r29877, r30045, r30209] Various keyboard handling fixes (Issues: 24817, 25000, 24921, 25396, 25330, 25254).
[r30032] Do not send some keyboard shortcuts to the renderers; e.g. cmd-w, cmd-t, ctrl-tab (Issues: 24877, 5496, 15090).
[r29812] "Copy image" now works (Issue: 13099).
[r30016] Cmd-clicking back button now opens history page in new background tab (Issue: 25319).
[r30100] If auto-update happens, About box now says "update is available" and "restart needed for latest version" (Issue: 13165).
[r30547] Form resubmission warning dialog implemented (Issue: 23526).
[r30189, r30190] Use Helvetica rather than Arial for several things (Issue: 21458).

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Orit Mazor

Google Chrome Technical Program Manager

Beta Channel Updated to 4.0 with Bookmark Sync

Monday, November 2, 2009

Version: 4.0.223.16 (Windows Only)

The Beta Channel is being updated to 4.0.223.16 which is our first Beta release for 4.0. This release includes many bug fixes and for the first time Bookmark Sync is enabled. Extensions are disabled until the final API changes arrive. Please use the dev channel for the latest extension API.
More details about the changes since 4.0.223.11 are available in the svn log of all revisions.
You can join the Beta channel here: http://www.google.com/chrome/eula.html?extra=betachannel.
If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.
Jonathan ConradtEngineering Program Manager

Dev Channel Updated with Crash and Calendar Fix

Friday, October 23, 2009

Version: 4.0.223.11
This release fixes a crash when running extensions like the Subscribe in Feed Reader sample. It also fixes a problem in Google Calendar where overlapping calendar items were invisible because they were being displayed with 0 width. This update is being released for Windows, Mac and Linux.
You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt

Engineering Program Manager

Dev Channel Updated with Fixes and Extension Changes

Thursday, October 22, 2009

This week Printing and the Quicktime plugin make their initial appearance on Chrome for Mac. Lots of important Extensions changes and quite a few bugs are also fixed.

Be sure to read the Known Issues if you are running Chrome for Mac.

All Platforms:

CSS rounded corners are now antialiased on Windows and Linux. (They were already on Mac.)

Mac:

Printing now works. (Issue: 13158)
[r28871] Autoupdates no longer cause problems if Chrome is already running. (Issue: 14610)
[r29388] Hitting backspace while IME is active does no longer go back in history. (Issue: 25000)
[r28837] QuickTime plugin no longer crashes, and often displays properly (though there are still bugs to be ironed out).
[r28837] Plugin whitelist has been removed, so that Chrome will attempt to load all NPAPI plugins. Expect more plugin crashes.
[r29396] Ctrl-tab switches tabs again. (Issue: 24921)
[r29458] Cmd-` switches windows again. (Issue: 24817)

Linux:

Minor visual polish (e.g. horizontal scrollbars show the proper grippy, omnibox highlighting fix).
[r28834] Create application shortcuts now works on Fedora 11. (Issue: 22966)
[r28869] Browser actions (extension buttons in toolbar) partly implemented. (Issue: 23882)
[r29102] Omnibox auto-complete popup stacks properly below SCIM IME candidate window. (Issue: 19082)
[r29261] Ctrl+F etc. no longer type other letters into edit boxes in non-English keyboard setups. (Issues: 10846, 2215, 21471)

Chrome Frame:

Fixes persistent IE 8 crashes. (Issue: 22768)

Fixed crashes when navigating with Web Inspector open. (Issue: 22993)

Fixes spurious errors when re-installing Chrome Frame. (Issue: 23444)

Fixes a crash in comctl32.dll, triggered by Google Wave. (Issue: 24115)

Fixes empty referrer issue for initial link navigations. (Issue: 22994)

Preview support for accessibility via MSAA, including ARIA role and state information. (Issues 23669, others)

Improved keyboard and accelerator handling.

IE text-size menu items now change text size in Chrome Frame.

Navigating to a site marked as restricted is now disabled in Chrome Frame. Chrome frame now updates the zone UI on the task bar.

Chrome Frame will now work for all other users on the machine, not just the user who installs it. (Issue: 23989)

Fixes for SSL certificate error issue.

Disables sending 'chromeframe' in the User-Agent if the Chrome Frame addon is disabled. (Issue: 22760)

Disables the 'Chrome has crashed - Restart?' message box.

Limited support for JavaScript history object for back/forward from content.

Extensions:

[r29068] *Breaking Change* Finalize browser actions API (Issue: 23879)
[r29284] *Breaking Change* Only one browser action or one page actions is now allowed per-extension. We are experimenting with the idea of a direct correspondence between extensions and visible UI features. We think this may improve managability. (Issue: 24473)
[r29335] Update page actions API to improve usability. Old API still supported. (Issue: 24635)
[r29495] Browser actions and page actions: Add chrome.browserAction.setIcon({path:...}). No longer need to prespecify images in manifest. (Issue: 22575)
[r29297] Add an options_page to the manifest. (Issue: 23801)
[r29365] You can now use (slightly) bigger icons in browser actions and page actions. Up to 19px square are now allowed (up from 16px). (Issue: 24881)
[r29046] Fix extension canceling. (Issue: 23405)
[r29143] Browser action button disappears when loading a new extension. (Issue: 23593)

Known issues:

Mac: If an older version of Chrome is running when this version is automatically installed the running version will not quit cleanly and will spike the CPU at 100%. It will be necessary to Force Quit the application. Use Cmd-Option-Escape to open the Force Quit dialog.
Mac: Cmd-opt-left/right navigate history instead of switching tabs (Issue:25396). Use cmd-{/} as workaround.
Linux: Some fonts may look blurry or extra bold. (Issue: 25365)

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt

Engineering Program Manager

Dev Channel Updated with Fixes

Thursday, October 15, 2009

Version 4.0.222.12
Windows release corresponding to the 4.0.222.5 releases for Mac and Linux.
Jon ConradtEngineering Program Manager

Dev Channel updated with Bug Fixes

Thursday, October 15, 2009

Version: 4.0.222.5
This week's dev channel update includes quite a few bug fixes. The Windows release will arrive shortly.

Mac OS X:

[r28121] Fix bookmark bar resize issues. (Issue: 23949)
[r28145] Support OS X's url handlers. (Issue: 15546)
[r28260, r28600] Make content area a drop target for dragging images, etc. (Issues: 23517, 19529)
[r28453] Enable "Edit Search Engines" in Omnibox context menu. (Issues: 22512, 22648)
[r28505, r28528] Make cmd-left/right and backspace/shift-backspace navigate history if the focus is not in a text box. (Issue: 12557)
[r28613] Fix a ton of theming bugs. (Issues: 22213, 20295, 18547, 19851, 23651, 24338, 18438)
[r28749] Status bubble now fades in and out after a delay. (Issue: 24495)
[ r 28709 ] Key equivalents sent to renderer: Cmd-s etc. should now work on e.g. google docs. (Issue: 15090)
[ r28813 ] Chrome's and Safari's ideas of "default browser" now agree. (Issue: 24401)

Linux:

Various crash and visual glitch fixes.

Extensions

[r28130, r28136] Can now set an image dynamically with an ImageData from a canvas. (Issue:23269)
[r28115] Can close popups using window.close. (Issue: 23832)
[r28187] Popups now have a bubble border. (Issue: 23833)
some sample extensions converted to use browser actions. (gmail checker, buildbot, mappy)
a number of other misc bug fixes.

[r28135] Extension packing now works on Linux and Mac. (Issue: 20669)

Known Issues:

[Mac] Trackpad scroll events are passed to windows behind the chrome window.
[Mac] Cmd-` doesn't work when tab contents are focused.
[Mac] Chrome for Mac thinks its name is Google Chrome Helper. (Issue: 24776)
[Mac] Cannot "edit" or "add" bookmarks via bookmark contextual menu. (Issue: 24828)

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt

Engineering Program Manager

Chrome Releases

Stable Channel Update

Dev Channel Updated with UI improvements for Mac

Beta Channel Updated to 4.0 with Bookmark Sync

Dev Channel Updated with Crash and Calendar Fix

Dev Channel Updated with Fixes and Extension Changes

Dev Channel Updated with Fixes

Dev Channel updated with Bug Fixes

Labels

Archive