Anzeigen der neuesten Beiträge
0 Mitglieder und 1 Gast betrachten dieses Thema.
Security Fixes and rewards:Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.Congratulations to Timothy D. Morgan on receiving a Chromium Security Reward for bug 32718. Note that Timothy elected to donate the reward to the Haiti relief effort, so Google raised the donation to $1337. * [12303] [29914] Low DNS and fall-back behavior of proxies. Credit to Eric Roman of the Chromium development community and Christopher Eatinger. * [31009] High Integer overflows in the v8 engine. Credit to Mark Dowd, under contract to Google Chrome Security Team. * [31692] High Error processing tag. Credit to Google Chrome Security Team (SkyLined). * [32309] Medium Leak of redirection target via <iframe> href. * [$500] [32718] Medium Domain confusion populating HTTP authentication dialog. Credit to Timothy D. Morgan of VSR (www.vsecurity.com). * [32915] High Integer overflow deserializing sandbox message. Credit to Mark Dowd, under contract to Google Chrome Security Team.
The dev channel has been updated to 5.0.322.2 for Windows, Mac and Linux platformsAll * [r38242] Don't crash when a theme specifies a nonexistent image. (Issue: 31719)Mac * [r38319] Honor modifiers for clicks on home button – cmd-clicking the home button now opens your home page in a new tab. (Issue: 34900) * [r38204] Implemented writing direction context menu in text input fields. * [r38504] Add local storage nodes to the cookie manager (Issue: 33068)Linux * [r38320] Use of Freetype's emboldening for fonts that don't provide bold. Fixes the sometimes blurry bold fonts. (Issue: 22360) * [r38372] Can now drag and drop bookmarks from Firefox. (Issue: 34141) * [r38246] Implement content blocking address bar icons and bubbles (Issue: 33314)Native Client * Chrome for Linux and Mac OS 10.6 can now run Native Client modules directly, no plugin required. To enable this features, run Chrome with the following command line flags --internal-nacl --enable-gpu-plugin --no-sandbox. * Platform-independent NPAPI extensions for 2D, 3D, and mouse/keyboard events are now available. * We'd like to hear from you. Please send feedback to native-client-discuss@googlegroups.com,Extensions * [r38239] Don't crash when extensions use cookie. (Issue: 34649) * [r38407] Preserve order of browser actions across extension autoupdate. (Issue: 33401) * Implemented overflow and reordering of browser actions (this was actually in the last update, but missed the release notes)Known Issues * Linux: Crash when editing a bookmark in the bookmark manager (Issue: 35438) * All: Chrome doesn't show popup blocker bubble (Issue: 35594) * Mac/Linux: Can't save cookie settings (Issue: 35307)
The Dev channel has been updated to 5.0.335.0 for Windows, Mac, and Linux platforms.All * Support "cache-bypassing reload"; this is hooked to various accelerators on different platforms (e.g. shift-reload, ctrl-reload, etc.) (Issue 1906) * [r38877, r39018, r39040, r39133, r39346, r39524] Fix numerous issues relating to new Content Settings functionality (Issues 34633, 34668, 35011, 35775, 36021) * [r39285] Fix crash when alert() is called from extension popup (Issue 33698) * [r39365] When a single tab is open, "Close other tabs" context menu option should be grayed out (Issue 35576) * [r39381] Remove all infobars from a tab when its renderer crashes (Issue 36035) * [r39412] Fix crash adding/deleting bookmark/folder when browser sync is on and the network is not available (Issue 36200) * [r39670] Do not send extra blur and focus events if popup menu is showing (Issue 23499) * [r39682] Fix crash when dragging bookmarks (Issue 36473)Windows * [r39328, r39564] Fix issues relating to new Content Settings functionality (Issue 35118, 36079) * [r39408] Fix a crash when installing an extension from incognito mode (Issue 36077) * [r39461] Fix star button theming (Issue: 35028) * [r39676] "Remove" and "remove all" buttons in cookie manager should not be enabled when nothing is selected (Issue 34886)Mac * [r39240] Fix Mac startup theme perf regression (Issue 34775) * [r39389, r39467, r39485] Add client SSL certificate support for Mac (Issue 16831) * Enable Full Screen mode (Issue 31638) * [r39231] Adds grippys to the left side of the Browser Actions container to resize the container (they do not work yet) (Issue 26990) * [r39158] Show icon in omnibox when popups were blocked (Issue 35594)Linux * Fix package dependencies in .deb package (Issue 35639) * [r38999] Fix crash with some extensions (Issue 35577) * [r39160, r39257] Fix issues relating to new Content Settings functionality (Issues 34941, 35861) * [r39250] Fix crash when editing a bookmark in the bookmark manager (Issue 35438) * [r39251] Implement the new AutoFill section of the Options dialog (Issue 33025) * [r39436] Failing NSS version check should not be a fatal error (Issue 33163) * [r39669] Add "deb" and "rpm" to dangerous extension list (Issue 31144)Security * [r39503, r39635] Be more careful about size calculations in GPU code (Issue: 35931) * Notable behavior change: every HTML document hosted on a local file:// URI now lives in a unique domain. Old behavior can be re-enabled with the new flag --allow-file-access-from-files. For a cross-browser discussion on background, please see http://blog.chromium.org/2008/12/security-in-depth-local-web-pages.htmlKnown Issues * Mac client SSL certificate support limitations: does not yet support server renegotiation attempts (so it doesn't work with all sites) (Issue 36207); client cert generation (the <keygen> tag) is not implemented yet (Issue 34607) * Mac: Blocked popups can currently not be opened (Issue 35594)
The Dev channel has been updated to 5.0.342.1 for Windows, Mac, and Linux platforms and 5.0.342.0 ChromeFrameAll * Extension content scripts no longer run multiple times after fragment (ie #hash) navigations (Issue:35924) * Early version of Geolocation API now available with following caveats: 1. To enable, run the browser with --enable-geolocation 2. Wifi based location is only supported on Windows and Mac (not OSX 10.6 for now) 3. Permissions are not persisted (will re-prompt every time) and associated UI is incomplete.Mac * Improved plugin stability (Issue:35081,36928) * AutoFill Preferences UI Updates * Translate infobars are now implemented (Issue:34466) * Mac History menu now has favicons andno longer lists duplicates of Recently Closed sites (Issues: 20464 and 21314) * Added HTML5 databases to the Mac cookie manager (Issue: 35191)Chrome Frame * Fixed crashes and improved cookie behavior (Issues: 34687, 34687, 36985, 36510, 34151)Known Issues * Linux o Chrome crashes when setting prompt for cookies/data (Issue: 37426) o The "Show details" link on cookie/data prompt doesn't work (Issue: 37428)