• Hardware accelerated 3D CSS
• New Safe Browsing protection against downloading malicious files
• Ability to delete Flash cookies from inside Chrome
• Launch Apps by name from the Omnibox
• Integrated Sync into new settings pages
• Improved screen reader support
• New warning when hitting Command-Q on Mac
• Removal of Google Gears

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

• [$2000] [73962] [79746] High CVE-2011-1808: Use-after-free due to integer issues in float handling. Credit to miaubiz.
• [75496] Medium CVE-2011-1809: Use-after-free in accessibility support. Credit to Google Chrome Security Team (SkyLined).
• [75643] Low CVE-2011-1810: Visit history information leak in CSS. Credit to Jesse Mohrland of Microsoft and Microsoft Vulnerability Research (MSVR).
• [76034] Low CVE-2011-1811: Browser crash with lots of form submissions. Credit to “DimitrisV22”.
• [$1337] [77026] Medium CVE-2011-1812: Extensions permission bypass. Credit to kuzzcc.
• [78516] High CVE-2011-1813: Stale pointer in extension framework. Credit to Google Chrome Security Team (Inferno).
• [79362] Medium CVE-2011-1814: Read from uninitialized pointer. Credit to Eric Roman of the Chromium development community.
• [79862] Low CVE-2011-1815: Extension script injection into new tab page. Credit to kuzzcc.
• [80358] Medium CVE-2011-1816: Use-after-free in developer tools. Credit to kuzzcc.
• [$500] [81916] Medium CVE-2011-1817: Browser memory corruption in history deletion. Credit to Collin Payne.
• [$1000] [81949] High CVE-2011-1818: Use-after-free in image loader. Credit to miaubiz.
• [$1000] [83010] Medium CVE-2011-1819: Extension injection into chrome:// pages. Credit to Vladislavas Jarmalis, plus subsequent independent discovery by Sergey Glazunov.
• [$3133.7] [83275] High CVE-2011-2332: Same origin bypass in v8. Credit to Sergey Glazunov.
• [$1000] [83743] High CVE-2011-2342: Same origin bypass in DOM. Credit to Sergey Glazunov.

In addition, we would like to thank David Levin of the Chromium development community, miaubiz, Christian Holler and Martin Barbella for working with us in the development cycle and preventing bugs from ever reaching the stable channel. Various rewards were issued.


We’d also like to call particular attention to Sergey Glazunov’s $3133.7 reward. Although the linked bug is not of critical severity, it was accompanied by a beautiful chain of lesser severity bugs which demonstrated critical impact. It deserves a more detailed write-up at a later date.

You can find out more about Chrome 12 at the official Chrome Blog.  The full list of changes is available in the SVN revision logs (Trunk, Branch).  Interested in switching to the Stable channel?  Find out how.  If you find a new issue, please let us know by filing a bug.

Today’s new stable release of Chrome brings improvements in security, privacy, and graphics to Chrome’s 160 million users.

Chrome is now more secure, thanks to enhancements to our Safe Browsing technology. In addition to protecting you from certain malware and phishing websites, Chrome now warns you before downloading some types of malicious files. We’ve carefully designed this feature so that malicious content can be detected without Chrome or Google ever having to know about the URLs you visit or the files you download.

Chrome also now gives you more control over the data that websites store on your computer. This includes Flash Player’s Local Shared Objects (LSOs), which were previously only manageable using an online settings applicationon Adobe’s website. We’ve worked closely with Adobe to integrate Flash LSO deletion directly into Chrome, making it easier for you to manage your online privacy.

Finally, Chrome’s graphics capabilities continue to improve. This release includes support for hardware-accelerated3D CSS, which means you’ll get a snazzier experience in some web pages and web apps that choose to implement 3D effects. To see hardware-accelerated 3D CSS in action, check out this Chrome Experiment on Windows Vista / Mac OS X 10.6 or above, featuring clips from Aardman Studio's “Shaun the Sheep.” In this simple experiment, you can rotate the video, scale it up and down, toggle the reflection on and off, and activate a rotating carousel of videos. Of course, you can also just enjoy the animated antics of a few funny animals.

As always, Chrome users will be automatically updated to this new version of Chrome in the coming days. As Chrome continues executing on its six-week release schedule, we’ve got many more improvements coming your way. Check back in a few weeks for our next beta channel release!

• File Manager fixes
• Change network connecting animation
• Crash and stability fixes
• Update Flash plugin to 10.2.159.1

No new known issues.

You can find full list of fixes that are in Chrome OS R12 in the chromium-os bug tracker . If you find new issues, please let us know by visiting our help site or filing a bug. You can submit feedback using ‘Report an issue’ under the wrench menu.

This release contains the following security fixes:

• Disallow root escalation by creating /var/lib/chromeos-aliases.conf and inserting commands. [Credit to Chrome OS Team (Sean Paul)]

• Disallow modification of about:flags in Guest mode [Credit to Chrome OS Security Team (Jim Hebert)]

• Multiple package updates (openssl, dbugs, pango, sudo, strongswan, acl, libxml2, dhcpd) [Credit to Chrome OS Security Team]

In addition to all Chrome 12 new features (see Chrome 12 blogpost), there are several Chrome OS great improvements including:

• File browser
• Shiny new look
• Improvements to GSM support
• Verizon activation improvements
• New Flash player
• Feedback link is now under the wrench menu ("Report an issue")
• 3G connection to the carrier fixes
• Wi-Fi connectivity/Out of the Box fixes
• New trackpad and sensitivity setting adjusted
• Auto update engine and debugging improvements
• Power optimizations
• GTalk video/chat optimizations
• Improved on screen indicators: brightness, network status, update icon

Known issues:

• [Bug 15211] Angry Birds displays black screen in SD and HD version during intro video
• [Bug 14592] 3g Activation does not complete first try but succeeds on second after a workaround
• [Bug 13269] Chat window refuses to open, even if contacts list will
• [Bug 12671] Encountered the recovery screen upon resuming from suspend (hard reboot helps)
• [Bug 15085] "He's Dead Jim" message while playing specific video in 720p