Chrome Releases: March 2010

Better integration with Internet Explorer’s popup blocker.
Fixes issues regarding switching to chrome frame with meta tag.
Fixes a number of crashes.
Fixes issues with URL referrer parsing
More details about additional changes are available in the svn log of all revision.
You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.
If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry
Anthony Laforge, Google Chrome

This release fixes two issues:

Fix to prevent crashes with the LastPass extension (Issue 38857)
Add the option to disable 'Offer to translate pages that aren't in a language I read' in Options > Under the Hood

This release also addresses one minor security issue:

[38845] Low Crash with bad FTP response. Credit to Tobias Klein (www.trapkit.de).

If you find issues, please let us know: http://code.google.com/p/chromium/issues/entry

--Mark Larson, Google Chrome Team

Google Chrome 4.1.249.1045 has been released to the Stable channel on Windows.

This release fixes two issues:

Fix to prevent crashes with the LastPass extension (Issue 38857)
Add the option to disable 'Offer to translate pages that aren't in a language I read' in Options > Under the Hood

This release also addresses one minor security issue:

[38845] Low Crash with bad FTP response. Credit to Tobias Klein (www.trapkit.de).

If you find issues, please let us know: http://code.google.com/p/chromium/issues/entry

--Mark Larson, Google Chrome Team

This release includes:

An integrated Adobe Flash Player Plug-in. We're integrating Adobe Flash Player 10.1.51.95 (10.1 beta 3) with Google Chrome so that you don't have to install it or worry about keeping it up-to-date. See the blog post on the Chromium blog for more details.

To use the bundled Flash Player plug-in, add --enable-internal-flash to your command line or shortcut for starting Google Chrome.
A basic plug-in manager. The about:plugins page now lets you disable any plug-in from loading on all web pages. See the Known Issues section: this doesn't work in all cases yet if you already have Adobe Flash Player for Windows Firefox, Safari, or Opera installed.

Known Issues:

On Windows, if you have Adobe Flash Player for Windows Firefox, Safari, or Opera installed, the Flash plug-in will still work in some cases even if you decline the license agreement (when using --enable-internal-flash) or disable the Flash plugin from about:plugins. We're working on it.
If you disable (or enable) a plugin on about:plugins, your change does not take effect until you restart Google Chrome.
There is no bundled Adobe Flash Player plug-in for 64-bit Linux.

--Anthony LaForge, Google Chrome Program Manager

We have released Google Chrome 5.0.356.2 to the Dev channel on Windows and Mac to fix an issue where dragging anything with your mouse would freeze the tab. See issue 38414.

--Mark Larson, Google Chrome Team

Update: We've released 5.0.356.2 for Linux Dev channel users as well now.

We have released Google Chrome 5.0.356.2 to the Dev channel on Windows and Mac to fix an issue where dragging anything with your mouse would freeze the tab. See issue 38414.
--Mark Larson, Google Chrome Team

More details about additional changes are available in the svn log of all revision.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Anthony Laforge
Google Chrome

The Dev channel has been updated to 5.0.356.0 for Mac.

Mac

[r41041] Implement Mac Address Book "me" card integration with Autofill. (Issue: 36496)
Various improvements to the bookmark folder menus.
[r40444] Fix beach ball/performance issues with the cookie manager. (Issue: 35134)

[r40587] Client SSL Certificate Support (UI) for Linux. (Issue: 25241)
[r40795] Renderers can now figure out how much memory they're using and release it properly. (Issue: 32519)

Chrome Frame

[r41754] Chrome frame should use "parentNode" instead of "parentElement" to get the DOM
[r41595] Better integration with host (InternetExplorer) popup blocker. (Issue: 34823)

Known Issues

Cannot drag anything (text or images) in a content area. For example, dragging a thumbnail on the new tab page hangs the page. (Issues: 38414, 38556)

The Dev channel has been updated to 5.0.356.0 for Windows, Linux, and Google Chrome Frame.

All

Form autofill enabled by default for new profiles. (Issue: 37466)

Windows

[r40376, r40570, r40955, r41171] Crash Fixes (Issues: 36280, 31723, 37674, 37698)

Linux

[r40587] Client SSL Certificate Support (UI) for Linux. (Issue: 25241)

[r40795] Renderers can now figure out how much memory they're using and release it properly. (Issue: 32519)

Chrome Frame

[r41754] Chrome frame should use "parentNode" instead of "parentElement" to get the DOM

[r41595] Better integration with host (InternetExplorer) popup blocker. (Issue: 34823)

Known Issues

Cannot drag anything (text or images) in a content area. For example, dragging a thumbnail on the new tab page hangs the page. (Issues: 38414, 38556)

The stable channel has been updated to 4.1.249.1036 for Windows, and includes the following features and security fixes (since 4.0):

Translate infobar.
Privacy features: content settings (cookies, images, JavaScript, plug-ins, pop-ups).
Disabling experimental new anti-reflected-XSS feature called "XSS Auditor". The feature is still experimental, and we're disabling it while we look into some serious performance issues in rare cases. Please see this post for more details about what the XSS Auditor is.

Please see this feature announcment post for more info about translate and privacy.

Security Fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Congratulations to Sergey Glazunov on receiving the first $1337 Chromium Security Reward for bug 35724.

[28804] [31880] High Race conditions and pointer errors in the sandbox infrastructure. Credit to Mark Dowd, under contract to Google Chrome Security Team.
[30801] [33445] Low Delete persisted metadata such as Web Databases and STS. Credit to Google Chrome Security Team (Chris Evans) and RSnake of ha.ckers.org.
[$500] [34978] High Memory error with malformed SVG. Credit to wushi of team509.
[$1337] [35724] High Integer overflows in WebKit JavaScript objects. Credit to Sergey Glazunov.
[36772] Medium HTTP basic auth dialog URL truncation.Credit to Google Chrome Security Team (Inferno).
[37007] Medium Bypass of download warning dialog. Credit to kuzzcc.
[$1000] [37383] High Cross-origin bypass. Credit to kuzzcc.
[$500] [Affected BETA only] [37061] High Memory error with empty SVG element. Credit to Aki Helin of OUSPG.

List of all changes: http://build.chromium.org/buildbot/perf/dashboard/ui/changelog.html?url=/branches/249/src&range=38071:41527&mode=html

- Orit Mazor, Google Chrome Team

EDIT 23-Mar-10 (mal): Remove "[33572] Medium HTTP headers processed before SafeBrowsing check" from security issues fixed. This is not fixed in this release.

The stable channel has been updated to 4.1.249.1036 for Windows, and includes the following features and security fixes (since 4.0):

Translate infobar.

Privacy features: content settings (cookies, images, JavaScript, plug-ins, pop-ups).

Disabling experimental new anti-reflected-XSS feature called "XSS Auditor". The feature is still experimental, and we're disabling it while we look into some serious performance issues in rare cases. Please see this post for more details about what the XSS Auditor is.

[28804] [31880] High Race conditions and pointer errors in the sandbox infrastructure. Credit to Mark Dowd, under contract to Google Chrome Security Team.

[30801] [33445] Low Delete persisted metadata such as Web Databases and STS. Credit to Google Chrome Security Team (Chris Evans) and RSnake of ha.ckers.org.

[$500] [34978] High Memory error with malformed SVG. Credit to wushi of team509.

[$1337] [35724] High Integer overflows in WebKit JavaScript objects. Credit to Sergey Glazunov.

[36772] Medium HTTP basic auth dialog URL truncation.Credit to Google Chrome Security Team (Inferno).

[37007] Medium Bypass of download warning dialog. Credit to kuzzcc.

[$1000] [37383] High Cross-origin bypass. Credit to kuzzcc.

[$500] [Affected BETA only] [37061] High Memory error with empty SVG element. Credit to Aki Helin of OUSPG.

List of all changes: http://build.chromium.org/buildbot/perf/dashboard/ui/changelog.html?url=/branches/249/src&range=38071:41527&mode=html

- Orit Mazor, Google Chrome Team

The Dev channel has been updated to 5.0.342.3 for Windows, Mac and Linux platforms

This release improves stability and fixes some known crashers (such as Issues: 37035, 37674, 37567)

Known Issues

All: Form auto-fill is not enabled by default (Issue 37466) - Fixed on Trunk
Windows: Browser crashes on quiting with Authentication dialog opened (Issue: 37698) - Fixed on Trunk
Linux: Chromium Bookmark Sync Not Working (Issue: 36460)

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry

Karen Grunberg
Google Chrome

The Dev channel has been updated to 5.0.342.3 for Windows, Mac and Linux platformsThis release improves stability and fixes some known crashers (such as Issues: 37035, 37674, 37567)
Known Issues

All: Form auto-fill is not enabled by default (Issue 37466) - Fixed on Trunk

Windows: Browser crashes on quiting with Authentication dialog opened (Issue: 37698) - Fixed on Trunk

Linux: Chromium Bookmark Sync Not Working (Issue: 36460)

Chrome Releases

Dev Update: Chrome Frame

Stable Update: Disable Translate

Dev update: Integrated Adobe Flash Player Plug-in

Beta Update: Finally a Chrome 5 Beta for Windows

Dev Channel Update

Beta Update: Translate for the Mac

Beta Update: Translate for Linux, SSL fix

Stable Update: Fix Extension Install Issue

Dev Update: Fix for tabs hanging after drag

Dev Channel Update

Dev Channel Update

Stable Channel Update

Dev Update: Mac Bookmarks and Autofill fixes

Dev Channel Update for Chrome Frame

Windows Beta Update

Dev Channel Update

Labels

Archive