Thursday, November 20, 2014

Dev Channel Update for Chrome OS

The Dev channel has been updated to 40.0.2214.10 (Platform version: 6457.8.0) for all Chrome OS devices except HP Chromebook and HP Chromebook 11. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Daniel Xie
Google Chrome

Stable Channel Update for Chrome OS

The Stable channel has been updated to 39.0.2171.85 (Platform version: 6310.48.0) for all Chrome OS devices except Dell Chromebook 11, HP Chromebook 14, Acer C720 and the Toshiba Chromebook. This build contains a number of bug fixes, security updates and feature enhancements. Systems will be receiving updates over the next couple weeks as the team takes a break over the holiday. Here is a list of Chromium changes.

Some highlights of these changes are:
  • Enable Chromecast support for media files stored on Google Drive
  • Update Network Error page design
  • Display apps installed in Google Drive in the Chrome OS Launcher
If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).


Ben Henry
Google Chrome

Chrome Beta for Android Update

Chrome Beta for Android has been updated to 39.0.2171.90 and will be available in Google Play over the next few hours. This release fixes various stability and performance bugs.  A partial list of changes in this build is available in the Git log. If you find a new issue, please let us know by filing a bug. More information about Chrome for Android is available on the Chrome site.

Alex Mineer
Google Chrome

Beta Channel Update

The Chrome team is excited to announce the promotion of Chrome 40 to the beta channel with 40.0.2214.10 for Windows, Linux and Mac.

This release contains many stability and developer improvements including:
  • Profile Lock, which introduces the ability to "child lock" signed-in profiles.
  • New Tabs Page Suggestions, which tries to determine which sites you'd like to visit depending on the the time and day.
  • New crash recovery UI.
A partial list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Matthew Yuan
Google Chrome

Dev Channel Update

The dev channel has been updated to 41.0.2224.3 for Windows, Mac and Linux.

A partial list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

Admin Console Update

The Admin console has been updated with the following changes to user and device settings:
  • A new user setting allows admins to set the behavior of the top row of keys on a Chrome device keyboard.

Known issues are available here. Enterprise customers can report an issue by contacting support.

Lawrence Lui
Google Chrome

Tuesday, November 18, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 39.0.2171.85 (Platform version: 6310.48.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is a list of Chromium changes.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Ben Henry
Google Chrome

Dev Channel update

The dev channel has been updated to 40.0.2214.10 for Windows, Mac and Linux.

A full list of changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.


Matthew Yuan
Google Chrome

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 39 to the stable channel for Windows, Mac and Linux. Chrome 39.0.2171.65 contains a number of fixes and improvements, including:
  • 64-bit support for Mac
  • A number of new apps/extension APIs 
  • Lots of under the hood changes for stability and performance 
A partial list of changes is available in the log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 42 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

[$500][389734] High CVE-2014-7899: Address bar spoofing. Credit to Eli Grey.
[$1500][406868] High CVE-2014-7900: Use-after-free in pdfium. Credit to Atte Kettunen from OUSPG.
[$1000][413375] High CVE-2014-7901: Integer overflow in pdfium. Credit to cloudfuzzer.
[$1000][414504] High CVE-2014-7902: Use-after-free in pdfium. Credit to cloudfuzzer.
[$3000][414525] High CVE-2014-7903: Buffer overflow in pdfium. Credit to cloudfuzzer.
[$2000][418161] High CVE-2014-7904: Buffer overflow in Skia. Credit to Atte Kettunen from OUSPG.
[$2000][421817] High CVE-2014-7905: Flaw allowing navigation to intents that do not have the BROWSABLE category. Credit to WangTao(neobyte) of Baidu X-Team.
[$500][423030] High CVE-2014-7906: Use-after-free in pepper plugins. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team.
[$7500][423703] High CVE-2014-0574: Double-free in Flash. Credit to biloulehibou.
[$5000][424453] High CVE-2014-7907: Use-after-free in blink. Credit to Chen Zhang (demi6od) of the NSFOCUS Security Team.
[$500][425980] High CVE-2014-7908: Integer overflow in media. Credit to Christoph Diehl.
[$500][391001] Medium CVE-2014-7909: Uninitialized memory read in Skia. Credit to miaubiz.

We would also like to thank Atte Kettunen, Christian Holler, cloudfuzzer, and mmaliszkiewicz for working with us during the development cycle to prevent security bugs from ever reaching the stable channel. $16500 in additional rewards were issued.

As usual, our ongoing internal security work was responsible for a wide range of fixes:
[433500] CVE-2014-7910: Various fixes from internal audits, fuzzing and other initiatives.

Many of the above bugs were detected using AddressSanitizer or MemorySanitizer.

Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Alex Mineer
Google Chrome

Thursday, November 13, 2014

Beta Channel Update for Chrome OS

The Beta channel has been updated to 39.0.2171.60 (Platform version: 6310.43.0) for all Chrome OS devices except Lenovo ThinkPad 11e Chromebook, HP Chromebook 14, Toshiba Chromebook, Acer C720 and Dell Chromebook 11. This build contains a number of bug fixes, security updates and feature enhancements. Here is a list of Chromium changes.

If you find new issues, please let us know by visiting our forum or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).

Ben Henry
Google Chrome