Chrome Releases
Release updates from the Chrome team
Chrome for Android Update
Thursday, November 14, 2013
The Chrome Team is excited to announce the promotion of Chrome 31 to the Stable channel for Android users. Chrome 31.0.1650.59, which will be will be
available in Google Play
over the next few days, contains a number of new features including:
Printing from Chrome on Android KitKat devices
Enhanced autofill for a faster checkout experience on sites supporting
requestAutocomplete
. Try it on
betabrand.com/#rac
Stability, performance, and security updates
Security fixes and rewards:
Congratulations to Pinkie Pie, for reclaiming the crown with another impressive exploit!
[
POW!!!
$50,000*
] [
319117
] [
319125
] Critical CVE-2013-6632: Multiple memory corruption issues. Credit to Pinkie Pie.
* This reward was co-sponsored by the HP Zero Day Initiative as part of Mobile Pwn2Own 2013.
Please see
the Chromium security page
for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
A partial list of changes in this build is available in the
SVN revision log
. If you find a new issue, please let us know by
filing a bug
. More information about Chrome for Android is available on the
Chrome site
.
Jason Kersey
Google Chrome
Chrome Beta for Android Update
Thursday, November 14, 2013
Chrome Beta for Android has been updated to 31.0.1650.60 and will be
available in Google Play
over the next few hours. This release fixes a number of browser crashes and removes the ability to add an application shortcut. This functionality will return in a future beta.
A partial list of changes in this build is available in the
SVN revision log
. If you find a new issue, please let us know by
filing a bug
. More information about Chrome for Android is available on the
Chrome site
.
Jason Kersey
Google Chrome
Stable Channel Update
Thursday, November 14, 2013
Chrome has been updated to 31.0.1650.57 for Windows, Mac, Linux and Chrome Frame.
Security fixes and rewards:
Congratulations to Pinkie Pie, for reclaiming his title with another impressive exploit!
[
Ka-po-po-po-pow
!!!
$50,000*
] [
319117
] [
319125
]
Critical
CVE-2013-6632: Multiple memory corruption issues.
Credit to Pinkie Pie.
* This reward was co-sponsored by the HP Zero Day Initiative as part of Mobile Pwn2Own 2013.
Please see
the Chromium security page
for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
A full list of changes is available in the
SVN log
. Interested in switching release channels?
Find out how
. If you find a new issue, please let us know by
filing a bug
.
Anthony Laforge
Google Chrome
Beta Channel Update
Wednesday, November 13, 2013
The Beta Channel has been updated to 32.0.1700.14 for Windows, Mac, Linux and Chrome Frame.
This release fixes a number of crashes and other bugs. A full list of changes is available in the
SVN log
. Interested in
switching
release channels? Find out
how
. If you find a new issue, please let us know by
filing a bug
.
Daniel Xie
Google Chrome
Dev Channel Update for Chrome OS
Tuesday, November 12, 2013
The Dev channel has been updated to 32.0.1700.12 (Platform version: 4920.8.0) for all Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. Here is the chromium
changelog
.
If you find new issues, please let us know by visiting our
forum
or
filing a bug
. Interested in switching channels?
Find out how.
You can submit feedback using ‘Report an issue...’ in the Chrome menu (3 horizontal bars in the upper right corner of the browser).
Matthew Yuan
Google Chrome
Dev Channel Update
Tuesday, November 12, 2013
The Dev Channel has been updated to 33.0.1707.0 for Windows, Mac and Linux.
This release fixes a number of crashes and other bugs. A full list of changes is available in the
SVN log
. Interested in
switching
release channels? Find out
how
. If you find a new issue, please let us know by
filing a bug
.
Anthony Laforge
Google Chrome
Stable Channel Update
Tuesday, November 12, 2013
Chrome has been updated to 31.0.1650.48 for Windows, Mac, Linux and Chrome Frame.
Flash Player has been
updated
to 11.9.900.152, which is included w/ this release.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.
This update includes
25 security fixes
. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the
Chromium security page
for more information.
[$
500
][
268565
]
Medium
CVE-2013-6621: Use after free related to speech input elements.
Credit to Khalil Zhani.
[$
2000
][
272786
]
High
CVE-2013-6622: Use after free related to media elements.
Credit to cloudfuzzer
.
[$
500
][
282925
]
High
CVE-2013-6623: Out of bounds read in SVG.
Credit to miaubiz
.
[$
1000
][
290566
]
High
CVE-2013-6624: Use after free related to “id” attribute strings.
Credit to Jon Butler
.
[$
2000
][
295010
]
High
CVE-2013-6625: Use after free in DOM ranges.
Credit to cloudfuzzer
.
[
295695
]
Low
CVE-2013-6626: Address bar spoofing related to interstitial warnings.
Credit to Chamal de Silva
.
[$
4000
][
299892
]
High
CVE-2013-6627: Out of bounds read in HTTP parsing.
Credit to skylined
.
[$
1000
][
306959
]
Medium
CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
Credit to Antoine Delignat-Lavaud and Karthikeyan Bhargavan from Prosecco of INRIA Paris
.
We would also like to thank
miaubiz
and
Atte Kettunen of OUSPG
for working with us during the development cycle to prevent security bugs from ever reaching the stable channel. $
2000
in additional rewards were issued.
As usual, our ongoing internal security work responsible for a wide range of fixes:
[
315823
]
Medium-Critical
CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
[
258723
]
Medium
CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
Credit to Michal Zalewski of Google.
[
299835
]
Medium
CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
Credit to Michal Zalewski of Google.
[
296804
]
High
CVE-2013-6631: Use after free in libjingle.
Credit to Patrik Höglund of the Chromium project.
Many of the above bugs were detected using
AddressSanitizer
.
A full list of changes is available in the
SVN log
. Interested in switching release channels?
Find out how
. If you find a new issue, please let us know by
filing a bug
.
Anthony Laforge
Google Chrome
Labels
Admin Console
43
Android WebView
19
Beta
21
Beta update
4
Beta updates
2024
chrome
15
Chrome Dev for Android
131
Chrome for Android
952
Chrome for iOS
382
Chrome for Meetings
5
Chrome OS
1150
Chrome OS Flex
23
Chrome OS Management
12
Chromecast Update
6
ChromeOS
211
ChromeOS Flex
208
Desktop Update
1118
dev update
266
Dev updates
1510
Early Stable Updates
49
Extended Stable updates
130
Flash Player update
5
Flex
1
Hangouts Meet hardware
5
LTS
89
stable
11
Stable updates
1248
Archive
2024
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2023
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2022
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2021
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2020
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2019
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2018
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2017
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2016
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2015
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2014
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2013
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2012
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2011
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2010
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2009
Dec
Nov
Oct
Sep
Aug
Jul
Jun
May
Apr
Mar
Feb
Jan
2008
Dec
Nov
Oct
Sep
Give us feedback in our
Product Forums
.
