[38105] Medium XSS via application/json response (regression). Credit to Ben Davis for original discovery and Emanuele Gentili for regression discovery.
[43322] Medium Memory error in video handling. Credit to Mark Dowd under contract to Google Chrome Security Team.
[43967] High Subresource displayed in omnibox loading. Credit to Michal Zalewski of Google Security Team.
[45267] High Memory error in video handling. Credit to Google Chrome Security Team (Cris Neckar).
[$500] [46126] High Stale pointer in x509-user-cert response. Credit to Rodrigo Marcos of SECFORCE.
[r49536] Fix a bug where menu items would be disabled if no windows were open. (Issue: 46355)
Linux
[r49458] Undo experiment where we used the tab theme image as the frame in popup windows. We now always use the default blue frame, matching Windows instead of matching Mac. (Issue: 43938)
[r49467] Side tabs for content settings window (Issue: 45546)
[r49451] Fix restore button doing nothing in certain circumstances (Issue: 46232)
Known Issues
Some images for the main toolbar are wrong (the Stop button is incorrectly squared off on Windows and Linux, and the omnibox edges are wrong on Mac).
More details about additional changes are available in the svn log of all revision.