The Beta channel has been updated to 18.0.1025.137 for Windows and Chrome Frame.  

The Chrome Stable channel has been updated to 17.0.963.83 on Windows, Mac, Linux and Chrome Frame.  This release fixes issues with Flash games, along with the security fixes listed below.

Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Some of the items listed below represent the start of hardening measures based on study of the exploits submitted to the Pwnium competition.

• [$1000] [113902] High CVE-2011-3050: Use-after-free with first-letter handling. Credit to miaubiz.
• [116162] High CVE-2011-3045: libpng integer issue from upstream. Credit to Glenn Randers-Pehrson of the libpng project.
• [$1000] [116461] High CVE-2011-3051: Use-after-free in CSS cross-fade handling. Credit to Arthur Gerkis.
• [116637] High CVE-2011-3052: Memory corruption in WebGL canvas handling. Credit to Ben Vanik of Google.
• [$1000] [116746] High CVE-2011-3053: Use-after-free in block splitting. Credit to miaubiz.
• [117418] Low CVE-2011-3054: Apply additional isolations to webui privileges. Credit to Sergey Glazunov.
• [117736] Low CVE-2011-3055: Prompt in the browser native UI for unpacked extension installation. Credit to PinkiePie.
• [$2000] [117550] High CVE-2011-3056: Cross-origin violation with “magic iframe”. Credit to Sergey Glazunov.

Also, this single low severity issue was fixed in a previous patch but we forgot to issue proper credit:

• [108648] Low CVE-2011-3049: Extension web request API can interfere with system requests. Credit to Michael Gundlach.

The Beta channel has been updated to  18.0.1025.116 or 18.0.1025.117 for Windows and 18.0.1025.117 Chrome Frame.  

The Beta channel has been updated to 18.0.1025.113 for Windows, Mac, Linux, and Chrome Frame.  

The Beta channel has been updated to 18.0.1025.109 for Windows, Mac, and Chrome Frame.  

The Beta channel has been updated to 18.0.1025.108 for Windows, Mac, Linux, and Chrome Frame.  

The Beta channel has been updated to 18.0.1025.100 for Windows, Mac, Linux, and Chrome Frame.  

The Stable channel has been updated to 17.0.963.80 (Platform version: 1412.234.0) for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

Release highlights:

• Stability & security fixes, as described in the Chrome Stable Update blog post.

Known issues:

• Issue 26698: Time display mismatch

The Chrome Stable channel has been updated to 17.0.963.79 on Windows, Mac, Linux and Chrome Frame.  This release fixes issues with Flash games, along with the security fix listed below.

Security fixes and rewards:

Congratulations to PinkiePie (aka PwniePie) for a beautiful piece of work to close out the Pwnium competition!

We’re delighted at the success of Pwnium and the ability to study full exploits. We anticipate landing additional changes and hardening measures for both CVE-2011-3046 and CVE-2011-3047 in the near future. We also believe that both submissions are works of art and deserve wider sharing and recognition. We plan to do technical reports on both Pwnium submissions in the future.

• [Like a b-b-b-b-boss!!! $60,000] [117620] [117656] Critical CVE-2011-3047: Errant plug-in load and GPU process memory corruption. Credit to PinkiePie.

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Full details about what changes are in this release are available in the SVN revision log. Interested in hopping on the stable channel? Find out how.  If you find a new issue, please let us know by filing a bug.

• Fixed Chrome install/update resets Google search preferences (Issue: 105390)
• Don't trigger accelerated compositing on 3D CSS when using swiftshader (Issue: 116401)
• Fixed a GPU crash (Issue: 116096)
• More fixes for Back button frequently hangs (Issue: 93427)
• Bastion now works (Issue: 116285)
• Fixed Composited layer sorting irregularity with accelerated canvas (Issue: 102943)
• Fixed Composited layer sorting irregularity with accelerated canvas (Issue: 102943)
• Fixed Google Feedback causes render process to use too much memory (Issue: 114489)
• Fixed after upgrade, some pages are rendered as blank (Issue: 109888)
• Fixed Pasting text into a single-line text field shouldn't keep literal newlines (Issue: 106551)