Stable updates

Stable Channel Update - The Stable channel has been updated to 16.0.912.77 for Windows, Mac, Linux and Chrome Frame

Submitted by admin on Mon, 01/23/2012 - 18:00

The Stable channel has been updated to 16.0.912.77 for Windows, Mac, Linux and Chrome Frame

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
    • [$1000] [106484] High CVE-2011-3924: Use-after-free in DOM selections. Credit to Arthur Gerkis.
    • [$3133.7] [107182] Critical CVE-2011-3925: Use-after-free in Safe Browsing navigation. Credit to Chamal de Silva. *
    • [108461] High CVE-2011-3928: Use-after-free in DOM handling. Credit to wushi of team509 reported through ZDI (ZDI-CAN-1415).
    • [$1000] [108605] High CVE-2011-3927: Uninitialized value in Skia. Credit to miaubiz.
    • [$1000] [109556] High CVE-2011-3926: Heap-buffer-overflow in tree builder. Credit to Arthur Gerkis.

The bugs 106484, 107182, 108461, and 109556 were detected using AddressSanitizer.
* Bug 107182 was fixed in 16.0.912.75 but accidentally excluded from the release notes.

Download Google Chrome (Stable) 16.0.912.77 Offline Windows Installer

Stable Channel Update for Chromebooks - updated to 16.0.912.75

Submitted by admin on Fri, 01/06/2012 - 12:36

The Stable channel has been updated to 16.0.912.75 (Platform version: 1193.158 for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

 
Highlights:
  • Security fixes
  • Stability fixes
If you find new issues, please let us know by visiting our help site or filing a bug. You can also submit feedback using "Report an issue" under the wrench icon. Interested in switching to the Dev channel? Find out how.
 

Stable Channel Update - The Stable channel has been updated to 16.0.912.75 for Windows, Mac, Linux and Chrome Frame

Submitted by admin on Thu, 01/05/2012 - 21:00
The Stable channel has been updated to 16.0.912.75 for Windows, Mac, Linux and Chrome Frame
 

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix
    • [$1000] [106672] High CVE-2011-3921: Use-after-free in animation frames. Credit to Boris Zbarsky of Mozilla.
    • [$1000] [107128] High CVE-2011-3919: Heap-buffer-overflow in libxml. Credit to Jüri Aedla.
    • [108006] High CVE-2011-3922: Stack-buffer-overflow in glyph handling. Credit to Google Chrome Security Team (Cris Neckar).

The bug [108006] was detected using AddressSanitizer.


 

Stable Channel Update for Chromebooks

Submitted by admin on Fri, 12/16/2011 - 18:14

 

The Google Chrome team is happy to announce the release of Chrome 16 on the Stable Channel for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48). 

Chrome version 16.0.912.66 (Platform version: 1193.117)

Release highlights:

  • Read about improvements to Chrome over on the Google Chome blog
  • Support for .zip files
  • Onscreen indication when caps lock is enabled
  • Warning messages regarding low disk space
  • Telegu and Kannada languages now supported
  • Updated Pepper Flash version
  • Crash fixes
  • Security updates

 

Stable Channel Update

Submitted by admin on Tue, 12/13/2011 - 11:00

 

The Google Chrome team is happy to announce the arrival of Chrome 16.0.912.63 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame.  Chrome 16 contains some really great improvements including enhancements to Sync and the ability to create multiple profiles on a single instance of Chrome. You can read about it more on the Google Chome blog. 

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix
    • [81753] Medium CVE-2011-3903: Out-of-bounds read in regex matching. Credit to David Holloway of the Chromium development community.
    • [95465] Low CVE-2011-3905: Out-of-bounds reads in libxml. Credit to Google Chrome Security Team (Inferno).
    • [$500] [98809] Medium CVE-2011-3906: Out-of-bounds read in PDF parser. Credit to Aki Helin of OUSPG.
    • [$1000] [99016] High CVE-2011-3907: URL bar spoofing with view-source. Credit to Luka Treiber of ACROS Security.
    • [100863] Low CVE-2011-3908: Out-of-bounds read in SVG parsing. Credit to Aki Helin of OUSPG.
    • [101010] Medium CVE-2011-3909: [64-bit only] Memory corruption in CSS property array. Credit to Google Chrome Security Team (scarybeasts) and Chu.
    • [101494] Medium CVE-2011-3910: Out-of-bounds read in YUV video frame handling. Credit to Google Chrome Security Team (Cris Neckar).
    • [101779] Medium CVE-2011-3911: Out-of-bounds read in PDF. Credit to Google Chrome Security Team (scarybeasts) and Robert Swiecki of the Google Security Team.
    • [$1000] [102359] High CVE-2011-3912: Use-after-free in SVG filters. Credit to Arthur Gerkis.
    • [$1000] [103921] High CVE-2011-3913: Use-after-free in Range handling. Credit to Arthur Gerkis.
    • [$1000] [104011] High CVE-2011-3914: Out-of-bounds write in v8 i18n handling. Credit to Sławomir Błażek.
    • [$1000] [104529] High CVE-2011-3915: Buffer overflow in PDF font handling. Credit to Atte Kettunen of OUSPG.
    • [$500] [104959] Medium CVE-2011-3916: Out-of-bounds reads in PDF cross references. Credit to Atte Kettunen of OUSPG.
    • [105162] Medium CVE-2011-3917: Stack-buffer-overflow in FileWatcher. Credit to Google Chrome Security Team (Marty Barbella).
    • [107258] High CVE-2011-3904: Use-after-free in bidi handling. Credit to Google Chrome Security Team (Inferno) and miaubiz.

Stable Channel Update for Chromebooks has been updated to 15.0.874.121 (Platform version: 1011.137)

Submitted by admin on Thu, 11/17/2011 - 18:36

The Stable channel has been updated to 15.0.874.121 (Platform version: 1011.137) for Chromebooks (Acer AC700,Samsung Series 5, and Cr-48).

 
Highlights:
  • New flash
  • Security fixes
  • Stability fixes
If you find new issues, please let us know by visiting our help site or filing a bug. You can also submit feedback using "Report an issue" under the wrench icon. Interested in switching to the Dev channel? Find out how.
 

Stable Channel Update - The Stable channel has been updated to 15.0.874.121 for Windows, Mac, Linux and Chrome Frame platforms

Submitted by admin on Wed, 11/16/2011 - 18:05

 

The Stable channel has been updated to 15.0.874.121 for Windows, Mac, Linux and Chrome Frame platforms
 
All
  • Updated V8 - 3.5.10.24
  • This build contains the fix to a regression: SVG in iframe doesn't use specified dimensions (Issue: 98951)
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [$1000] [103259] High CVE-2011-3900: Out-of-bounds write in v8. Credit to Christian Holler.

Full details about what changes have been made in this release are available in the SVN revisions log. Interested in switching to another channel?  Find out how.  If you find a new issue, please let us know by filing a bug.

 

Download Google Chrome (Stable) 15.0.874.121 Offline Windows Installer

Stable Channel Update - The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms

Submitted by admin on Thu, 11/10/2011 - 10:30

 

The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms 
All
  • Updated V8 - 3.5.10.23
  • Fix small print sizing issues (issues: 102186, 82472, 102154)
  • This new build also contains a new version of Flash which contains security fixes. (Release Notes)
Mac
  • Fixed the "certificate is not yet valid" error for server certificate issued by a VeriSign intermediate CA. (issue 101555)
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [$500] [100465] High CVE-2011-3892: Double free in Theora decoder. Credit to Aki Helin of OUSPG.
  • [$500] [100492] [100543] Medium CVE-2011-3893: Out of bounds reads in MKV and Vorbis media handlers. Credit to Aki Helin of OUSPG.
  • [101172] High CVE-2011-3894: Memory corruption regression in VP8 decoding. Credit to Andrew Scherkus of the Chromium development community.
  • [$1000] [101458] High CVE-2011-3895: Heap overflow in Vorbis decoder. Credit to Aki Helin of OUSPG.
  • [101624] High CVE-2011-3896: Buffer overflow in shader variable mapping. Credit to Ken “strcpy” Russell of the Chromium development community.
  • [102242] High CVE-2011-3897: Use-after-free in editing. Credit to pa_kt reported through ZDI (ZDI-CAN-1416).
  • [102461] Low CVE-2011-3898: Failure to ask for permission to run applets in JRE7. Credit to Google Chrome Security Team (Chris Evans).

The bugs [100465], [100492], [100543] and [101458] were detected using AddressSanitizer. 

Download Google Chrome (Stable) 15.0.874.120 Offline Windows Installer

Stable Channel Update for Chromebooks - release of Chrome 15 for Acer AC700, Samsung Series 5, and Cr-48

Submitted by admin on Wed, 11/09/2011 - 18:45

 

The Google Chrome team is happy to announce the release of Chrome 15 on the Stable Channel for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

Chrome version 15.0.874.117 (Platform version: 1011.118)

Release highlights:

  • New Chrome 15 functionality (check out the Official Chrome Blog for more information)
  • New Web UI Login
  • Support playback of key media codecs
  • Improve video decode performance
  • Add concept of preferred networks
  • New ‘Games’ and ‘Music’ apps by default
  • NTFS support
  • Add localized text for recovery
  • Networking improvements
  • Crash fixes
  • Security updates

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching to the Beta channel? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu.

Stable Channel Update - The Stable channel has been updated to 15.0.874.106 for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Wed, 10/26/2011 - 14:49

The Stable channel has been updated to 15.0.874.106 for Windows, Mac, Linux, and Chrome Frame.  This release fixes login issues to Barrons Online and The Wall Street Journal (Issue 101274).

Download Google Chrome (Stable) 15.0.874.106 Offline Windows Installer

The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Tue, 10/25/2011 - 11:04
The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame.  Chrome 15 contains some really great improvements including a new New Tab page. You can read about it more on the Google Chome blog.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [$500] [86758] High CVE-2011-2845: URL bar spoof in history handling. Credit to Jordi Chancel.
  • [88949] Medium CVE-2011-3875: URL bar spoof with drag+drop of URLs. Credit to Jordi Chancel.
  • [90217] Low CVE-2011-3876: Avoid stripping whitespace at the end of download filenames. Credit to Marc Novak.
  • [91218] Low CVE-2011-3877: XSS in appcache internals page. Credit to Google Chrome Security Team (Tom Sepez) plus independent discovery by Juho Nurminen.
  • [94487] Medium CVE-2011-3878: Race condition in worker process initialization. Credit to miaubiz.
  • [95374] Low CVE-2011-3879: Avoid redirect to chrome scheme URIs. Credit to Masato Kinugawa.
  • [95992] Low CVE-2011-3880: Don’t permit as a HTTP header delimiter. Credit to Vladimir Vorontsov, ONsec company.
  • [$12174] [96047] [96885] [98053] [99512] [99750] High CVE-2011-3881: Cross-origin policy violations. Credit to Sergey Glazunov.
  • [96292] High CVE-2011-3882: Use-after-free in media buffer handling. Credit to Google Chrome Security Team (Inferno).
  • [$1000] [96902] High CVE-2011-3883: Use-after-free in counter handling. Credit to miaubiz.
  • [97148] High CVE-2011-3884: Timing issues in DOM traversal. Credit to Brian Ryner of the Chromium development community.
  • [$6337] [97599] [98064] [98556] [99294] [99880] [100059] High CVE-2011-3885: Stale style bugs leading to use-after-free. Credit to miaubiz.
  • [$2000] [98773] [99167] High CVE-2011-3886: Out of bounds writes in v8. Credit to Christian Holler.
  • [$1500] [98407] Medium CVE-2011-3887: Cookie theft with javascript URIs. Credit to Sergey Glazunov.
  • [$1000] [99138] High CVE-2011-3888: Use-after-free with plug-in and editing. Credit to miaubiz.
  • [$2000] [99211] High CVE-2011-3889: Heap overflow in Web Audio. Credit to miaubiz.
  • [99553] High CVE-2011-3890: Use-after-free in video source handling. Credit to Ami Fischman of the Chromium development community.
  • [100332] High CVE-2011-3891: Exposure of internal v8 functions. Credit to Steven Keuchel of the Chromium development community plus independent discovery by Daniel Divricean.

The bugs [94487], [96292], [96902], [97599], [98064], [98556], [99294], [100059], [99138] and [99211] were detected using AddressSanitizer.

Although Chrome is not directly affected by the attack, the NSS network library was updated to include a defense against so-called BEAST. This defense may expose bugs in Brocade hardware. Brocade is working on the issue. The lighttpd project fixed a compatibility issue at version 1.4.27 and newer.

The Stable channel has been updated to 14.0.835.204 (Platform version: 811.154) for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48)

Submitted by admin on Mon, 10/10/2011 - 15:43

The Stable channel has been updated to 14.0.835.204 (Platform version: 811.154) for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

Stable Channel Update - The Stable channel has been updated to 14.0.835.202 for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Tue, 10/04/2011 - 11:40

 

The Stable channel has been updated to 14.0.835.202 for Windows, Mac, Linux, and Chrome Frame.  This release contains Adobe Flash Player 11, along with the stability and security fixes listed below.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

  • [$1000] [93788] High CVE-2011-2876: Use-after-free in text line box handling. Credit to miaubiz.
  • [$1000] [95072] High CVE-2011-2877: Stale font in SVG text handling. Credit to miaubiz.
  • [$2000] [95671] High CVE-2011-2878: Inappropriate cross-origin access to the window prototype. Credit to Sergey Glazunov.
  • [96150] High CVE-2011-2879: Lifetime and threading issues in audio node handling. Credit to Google Chrome Security Team (Inferno).
  • [$4500] [97451] [97520] [97615] High CVE-2011-2880: Use-after-free in the v8 bindings. Credit to Sergey Glazunov.
  • [$1500] [97784] High CVE-2011-2881: Memory corruption with v8 hidden objects. Credit to Sergey Glazunov.
  • [98089] Critical CVE-2011-3873: Memory corruption in shader translator. Credit to Zhenyao Mo of the Chromium development community.

Full details about what changes have been made in this release are available in the SVN revision log. Interested in switching to another channel?  Find out how.  If you find a new issue, please let us know by filing a bug.

Download Google Chrome (Stable) 14.0.835.202 Offline Windows Installer

Stable and Beta Channel Updates - The Chrome Stable channel has been updated to 14.0.835.187, and the Beta channel has been updated to 15.0.874.58

Submitted by admin on Sat, 10/01/2011 - 12:00

The Chrome Stable channel has been updated to 14.0.835.187, and the Beta channel has been updated to 15.0.874.58. These updates should help repair Chrome installs that were broken due to the issue with Microsoft Security Essentials, discussed on the Chrome Blog.  If you find any new issues, please let us know by filing a bug.

 

Beta and Stable Channels Update for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48) - updated to 14.0.835.186

Submitted by admin on Tue, 09/20/2011 - 18:19

The Beta and Stable channels have been updated to 14.0.835.186 (Platform version 0.14.811.117) for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

Stable Channel Update - The Beta and Stable channels have been updated to 14.0.835.186 for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Tue, 09/20/2011 - 14:14

 

The Beta and Stable channels have been updated to 14.0.835.186 for Windows, Mac, Linux, and Chrome Frame.

This release includes an update to Flash Player that addresses a zero-day vulnerability.

Stable Channel Update - The Chrome Stable channel has been updated to 14.0.835.163 for all platforms

Submitted by admin on Fri, 09/16/2011 - 10:00

The Chrome Stable channel has been updated to 14.0.835.163 for all platforms.  This release contains the following security fixes. More details about high level features can be found on the Google Chrome blog.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
  • [49377] High CVE-2011-2835: Race condition in the certificate cache. Credit to Ryan Sleevi of the Chromium development community.
  • [51464] Low CVE-2011-2836: Infobar the Windows Media Player plug-in to avoid click-free access to the system Flash. Credit to electronixtar.
  • [Linux only] [57908] Low CVE-2011-2837: Use PIC / pie compiler flags. Credit to wbrana.
  • [75070] Low CVE-2011-2838: Treat MIME type more authoritatively when loading plug-ins. Credit to Michal Zalewski of the Google Security Team.
  • [76771] High CVE-2011-2839: Crash in v8 script object wrappers. Credit to Kostya Serebryany of the Chromium development community.
  • [78427] [83031] Low CVE-2011-2840: Possible URL bar spoofs with unusual user interaction. Credit to kuzzcc.
  • [$500] [78639] High CVE-2011-2841: Garbage collection error in PDF. Credit to Mario Gomes.
  • [Mac only] [80680] Low CVE-2011-2842: Insecure lock file handling in the Mac installer. Credit to Aaron Sigel of vtty.com.
  • [82438] Medium CVE-2011-2843: Out-of-bounds read with media buffers. Credit to Kostya Serebryany of the Chromium development community.
  • [85041] Medium CVE-2011-2844: Out-of-bounds read with mp3 files. Credit to Mario Gomes.
  • [$1000] [89219] High CVE-2011-2846: Use-after-free in unload event handling. Credit to Arthur Gerkis.
  • [$1000] [89330] High CVE-2011-2847: Use-after-free in document loader. Credit to miaubiz.
  • [$500] [89564] Medium CVE-2011-2848: URL bar spoof with forward button. Credit to Jordi Chancel.
  • [89795] Low CVE-2011-2849: Browser NULL pointer crash with WebSockets. Credit to Arthur Gerkis.
  • [$500] [89991] Medium CVE-2011-3234: Out-of-bounds read in box handling. Credit to miaubiz.
  • [90134] Medium CVE-2011-2850: Out-of-bounds read with Khmer characters. Credit to miaubiz.
  • [90173] Medium CVE-2011-2851: Out-of-bounds read in video handling. Credit to Google Chrome Security Team (Inferno).
  • [$500] [91120] High CVE-2011-2852: Off-by-one in v8. Credit to Christian Holler.
  • [91197] High CVE-2011-2853: Use-after-free in plug-in handling. Credit to Google Chrome Security Team (SkyLined).
  • [$1000] [92651] [94800] High CVE-2011-2854: Use-after-free in ruby / table style handing. Credit to Sławomir Błażek, and independent later discoveries by miaubiz and Google Chrome Security Team (Inferno).
  • [$1000] [92959] High CVE-2011-2855: Stale node in stylesheet handling. Credit to Arthur Gerkis.
  • [$2000] [93416] High CVE-2011-2856: Cross-origin bypass in v8. Credit to Daniel Divricean.
  • [$1000] [93420] High CVE-2011-2857: Use-after-free in focus controller. Credit to miaubiz.
  • [$1000] [93472] High CVE-2011-2834: Double free in libxml XPath handling. Credit to Yang Dingning from NCNIPC, Graduate University of Chinese Academy of Sciences.
  • [93497] Medium CVE-2011-2859: Incorrect permissions assigned to non-gallery pages. Credit to Bernhard ‘Bruhns’ Brehm of Recurity Labs.
  • [$1000] [93587] High CVE-2011-2860: Use-after-free in table style handling. Credit to miaubiz.
  • [93596] Medium CVE-2011-2861: Bad string read in PDF. Credit to Aki Helin of OUSPG.
  • [$2337] [93906] High CVE-2011-2862: Unintended access to v8 built-in objects. Credit to Sergey Glazunov.
  • [95563] Medium CVE-2011-2864: Out-of-bounds read with Tibetan characters. Credit to Google Chrome Security Team (Inferno).
  • [95625] Medium CVE-2011-2858: Out-of-bounds read with triangle arrays. Credit to Google Chrome Security Team (Inferno).
  • [95917] Low CVE-2011-2874: Failure to pin a self-signed cert for a session. Credit to Nishant Yadant of VMware and Craig Chamberlain (@randomuserid).
  • [$1000] [95920] High CVE-2011-2875: Type confusion in v8 object sealing. Credit to Christian Holler.

In addition, we would like to thank “send.my.spam.to”, “Feiler89”, miaubiz, The Microsoft Java Team / Microsoft Vulnerability Research (MSVR), Chris Rohlf of Matasano, Chamal de Silva, Christian Holler, “simon.sarris” and Alexey Proskuryakov of Apple for working with us in the development cycle and preventing bugs from ever reaching the stable channel. Various rewards were issued.

Download Google Chrome (Stable) 14.0.835.163 Offline Windows Installer

Stable Channel Update - The Stable channel has been updated to 13.0.782.220 for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Sat, 09/03/2011 - 12:23

The Stable channel has been updated to 13.0.782.220 for Windows, Mac, Linux, and Chrome Frame.

 We're revoking trust for SSL certificates issued by DigiNotar-controlled intermediate CAs used by the Dutch PKIoverheid program. For more details about the security issues see the Google Security Blog post about DigiNotar and an update from Mozilla, who is also moving to revoke trust in these certificates.

Download Google Chrome (Stable) 13.0.782.220 Offline Windows Installer

Stable Update - The Stable channel has been updated to 13.0.782.218 for Windows, Mac, Linux, and Chrome Frame

Submitted by admin on Tue, 08/30/2011 - 14:44

The Stable channel has also been updated to 13.0.782.218 for Windows, Mac, Linux, and Chrome Frame.

These releases contain an updated version of the Adobe Flash Player.

Download Google Chrome (Stable) 13.0.782.218 Offline Windows Installer

Stable Channel Update for Chromebooks - release of Chrome 13.0.782.216 for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48)

Submitted by admin on Mon, 08/22/2011 - 22:43

The Google Chrome team is happy to announce the release of Chrome 13.0.782.216 (Platform version: 587.126) on the Stable Channel for Chromebooks (Acer AC700, Samsung Series 5, and Cr-48).

Highlights:

  • Several Chrome security fixes. See blog post for details.

If you find new issues, please let us know by visiting our help site or filing a bug. You can also submit feedback using "Report an issue" under the wrench icon.