Chrome Stable channel updated

[Page42]

The Chrome Stable channel has been updated to 18.0.1025.168

[abu shofwan]

-{ Quote: "The Chrome Stable channel has been updated to 18.0.1025.168" }-

for those who are interested :)

-{ Quote: "Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[106413] High CVE-2011-3078: Use after free in floats handling. Credit to Google Chrome Security Team (Marty Barbella) and independent later discovery by miaubiz.
[117110] High CVE-2012-1521: Use after free in xml parser. Credit to Google Chrome Security Team (SkyLined) and independent later discovery by wushi of team509 reported through iDefense VCP (V-874rcfpq7z).
[117627] Medium CVE-2011-3079: IPC validation failure. Credit to PinkiePie.
[121726] Medium CVE-2011-3080: Race condition in sandbox IPC. Credit to Willem Pinckaers of Matasano.
[$1000] [121899] High CVE-2011-3081: Use after free in floats handling. Credit to miaubiz.
" }-

[JRViejo]

FYI. Google Chrome Portable 18.0.1025.168 Stable (web browser) Released (http://portableapps.com/news/2012-04-13-_-google-chrome-portable-18.0.1025.162-released) for PA Platform (http://portableapps.com/news/2011-12-08_-_portableapps.com_platform_10.0_released) users, courtesy of PortableApps.com.

[1chaoticadult]

Stable Channel updated to 19.0.1084.46

[Page42]

Thanks for the heads up, man. ;)

[1chaoticadult]

-{ Quote: "Thanks for the heads up, man. ;)" }-

No problem Page :thumb:

[JRViejo]

FYI. Google Chrome Portable 19.0.1084.46 Stable (web browser) Released (http://portableapps.com/news/2012-05-15--google-chrome-portable-19.0.1084.46-released) for PA Platform (http://portableapps.com/news/2011-12-08_-_portableapps.com_platform_10.0_released) users, courtesy of PortableApps.com.

[Page42]

More info on the Stable Channel Update....

-{ Quote: "Google Chrome 19 arrives to the Stable Channel for Windows, Mac, Linux and Chrome Frame (http://google-chrome-browser.com/google-chrome-19-arrives-stable-channel-windows-mac-linux-and-chrome-frame)
Submitted by admin on Tue, 05/15/2012 - 10:00 Google Chrome 19 release Stable updates


The Google Chrome team is happy to announce the arrival of Chrome 19 to the Stable Channel for Windows, Mac, Linux and Chrome Frame. Chrome 19 contains a number of new features like tab sync. More detailed updates are available on the Chrome Blog.

Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
[112983] Low CVE-2011-3083: Browser crash with video + FTP. Credit to Aki Helin of OUSPG.
[113496] Low CVE-2011-3084: Load links from internal pages in their own process. Credit to Brett Wilson of the Chromium development community.
[118374] Medium CVE-2011-3085: UI corruption with long autofilled values. Credit to “psaldorn”.
[$1000] [118642] High CVE-2011-3086: Use-after-free with style element. Credit to Arthur Gerkis.
[118664] Low CVE-2011-3087: Incorrect window navigation. Credit to Charlie Reis of the Chromium development community.
[$500] [120648] Medium CVE-2011-3088: Out-of-bounds read in hairline drawing. Credit to Aki Helin of OUSPG.
[$1000] [120711] High CVE-2011-3089: Use-after-free in table handling. Credit to miaubiz.
[$500] [121223] Medium CVE-2011-3090: Race condition with workers. Credit to Arthur Gerkis.
[121734] High CVE-2011-3091: Use-after-free with indexed DB. Credit to Google Chrome Security Team (Inferno).
[$1000] [122337] High CVE-2011-3092: Invalid write in v8 regex. Credit to Christian Holler.
[$500] [122585] Medium CVE-2011-3093: Out-of-bounds read in glyph handling. Credit to miaubiz.
[122586] Medium CVE-2011-3094: Out-of-bounds read in Tibetan handling. Credit to miaubiz.
[$1000] [123481] High CVE-2011-3095: Out-of-bounds write in OGG container. Credit to Hannu Heikkinen.
[Linux only] [123530] Low CVE-2011-3096: Use-after-free in GTK omnibox handling. Credit to Arthur Gerkis.
[123733] [124182] High CVE-2011-3097: Out-of-bounds write in sampled functions with PDF. Credit to Kostya Serebryany of Google and Evgeniy Stepanov of Google.
[Windows only] [124216] Low CVE-2011-3098: Bad search path for Windows Media Player plug-in. Credit to Haifei Li of Microsoft and MSVR (MSVR:159).
[124479] High CVE-2011-3099: Use-after-free in PDF with corrupt font encoding name. Credit to Mateusz Jurczyk of Google Security Team and Gynvael Coldwind of Google Security Team.
[124652] Medium CVE-2011-3100: Out-of-bounds read drawing dash paths. Credit to Google Chrome Security Team (Inferno).

And some additional rewards for issues with a wider scope than Chrome:

[Linux only] [$500] [118970] Medium CVE-2011-3101: Work around Linux Nvidia driver bug. Credit to Aki Helin of OUSPG.
[$1500] [125462] High CVE-2011-3102: Off-by-one out-of-bounds write in libxml. Credit to Jüri Aedla.

Many of the above bugs were detected using AddressSanitizer.

We’d also like to thank Aki Helin of OUSPG, Sławomir Błażek, Chamal de Silva, miaubiz, Arthur Gerkis and Christian Holler for working with us during the development cycle and preventing security regressions from ever reaching the stable channel. $9000 of additional rewards were issued for this awesomeness." }-

[Page42]

The Chrome Stable channel has been updated to 19.0.1084.52

[Hungry Man]

-{ Quote: "
[117409] High CVE-2011-3103: Crashes in v8 garbage collection. Credit to the Chromium development community (Brett Wilson).
[118018] Medium CVE-2011-3104: Out-of-bounds read in Skia. Credit to Google Chrome Security Team (Inferno).
[$1000] [120912] High CVE-2011-3105: Use-after-free in first-letter handling. Credit to miaubiz.
[122654] Critical CVE-2011-3106: Browser memory corruption with websockets over SSL. Credit to the Chromium development community (Dharani Govindan).
[124625] High CVE-2011-3107: Crashes in the plug-in JavaScript bindings. Credit to the Chromium development community (Dharani Govindan).
[$1337] [125159] Critical CVE-2011-3108: Use-after-free in browser cache. Credit to “efbiaiinzinz”.
[Linux only] [$1000] [126296] High CVE-2011-3109: Bad cast in GTK UI. Credit to Micha Bartholomé.
[126337] [126343] [126378] [127349] [127819] [127868] High CVE-2011-3110: Out of bounds writes in PDF. Credit to Mateusz Jurczyk of the Google Security Team, with contributions by Gynvael Coldwind of the Google Security Team.
[$500] [126414] Medium CVE-2011-3111: Invalid read in v8. Credit to Christian Holler.
[127331] High CVE-2011-3112: Use-after-free with invalid encrypted PDF. Credit to Mateusz Jurczyk of the Google Security Team, with contributions by Gynvael Coldwind of the Google Security Team.
[127883] High CVE-2011-3113: Invalid cast with colorspace handling in PDF. Credit to Mateusz Jurczyk of the Google Security Team, with contributions by Gynvael Coldwind of the Google Security Team.
[128014] High CVE-2011-3114: Buffer overflows with PDF functions. Credit to Google Chrome Security Team (scarybeasts).
[$1000] [128018] High CVE-2011-3115: Type corruption in v8. Credit to Christian Holler.
" }-
http://googlechromereleases.blogspot.com/2012/05/stable-channel-update_23.html?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+GoogleChromeReleases+%28Google+Chrome+Releases%29

Critical: 2
High: 9
Medium: 2
Low: 0

[Page42]

The Stable channel has been updated to 19.0.1084.56 for Windows, Linux, and Chrome Frame. This build contains a new version of Flash Player (11.3), in addition to some minor stability fixes.

[JRViejo]

FYI. Google Chrome Portable 19.0.1084.56 Stable (web browser) Released (http://portableapps.com/news/2012-06-10--google-chrome-portable-19.0.1084.56-released) for PA Platform (http://portableapps.com/news/2011-12-08_-_portableapps.com_platform_10.0_released) users, courtesy of PortableApps.com.

[Page42]

The Google Chrome team is happy to announce the arrival of Chrome 20 (20.0.1132.43) to the Stable Channel for Windows, Mac, Linux, and Chrome Frame.

[guest]

What's new?

[Hungry Man]

http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html

Huge number of patches.

[guest]

Wow. Chrome 20 is as exciting as dental floss, apparently...

[Hungry Man]

http://peter.sh/tag/chrome-20/

If you'd like more details on the changes you can see them there.

[guest]

Almost like throwing this (https://www.mozilla.org/en-US/firefox/13.0/releasenotes/buglist.html) at people's face.

But thanks anyway. Should I expect something to be announced at http://chrome.blogspot.com ? It seems weird that the 20th version doesn't have one single "announceable" new feature.

[vasa1]

-{ Quote: "http://peter.sh/tag/chrome-20/

If you'd like more details on the changes you can see them there." }-
Thanks for the link!
BTW, http://src.chromium.org/viewvc/chrome?view=rev&revision=129671

[guest]

-{ Quote: "
BTW, http://src.chromium.org/viewvc/chrome?view=rev&revision=129671" }-

I'm out of words, let the emoticons speak for me: ::) ::) ::) ::) ::)

[Hungry Man]

-{ Quote: "Almost like throwing this (https://www.mozilla.org/en-US/firefox/13.0/releasenotes/buglist.html) at people's face.

But thanks anyway. Should I expect something to be announced at http://chrome.blogspot.com ? It seems weird that the 20th version doesn't have one single "announceable" new feature." }-
How should I know? lol

Perhaps if they waited a year between releases they'd have more to talk about lol

[The Hammer]

-{ Quote: "I'm out of words, let the emoticons speak for me: ::) ::) ::) ::) ::)" }-
What? I'm shocked.:o

[guest]

-{ Quote: "How should I know? lol

Perhaps if they waited a year between releases they'd have more to talk about lol" }-

I was under the impression that you could interpret/translate that (http://peter.sh/tag/chrome-20/). lol

-{ Quote: "What? I'm shocked.:o" }-

I'm shocked and stunned. lol

[vasa1]

Very topical posts here.

[Hungry Man]

-{ Quote: "Very topical posts here.
" }-
Typical, even.

-{ Quote: "I was under the impression that you could interpret/translate that. lol" }-
Too much for me to summarize.

[guest]

Chrome 20 (aka dental floss' release, lmao) shows that version numbering definitely lost any importance to typical Chrome's users. This is a bit disappointing, although fully expected.

[Hungry Man]

If you insist. I don't really care lol some releases hold new features and some releases hold improvements to old ones.

[guest]

Typically, devs would try to impress the crowd in the "divisible by ten" numbered releases. It's weird to see this "typical behavior" getting lost in this project.

[JimboW]

Well, except for the security fixes, there's a subtle UI change with the larger new tab button. But the the most important change in Chrome 20 for me is the untrusted integrity level.

[demoneye]

go go chrome :D

[Page42]

-{ Quote: "Well, except for the security fixes, there's a subtle UI change with the larger new tab button. But the the most important change in Chrome 20 for me is the untrusted integrity level." }-
Where can one find more info on the untrusted integrity level change, JimboW?

[JimboW]

-{ Quote: "Where can one find more info on the untrusted integrity level change, JimboW?" }-


Sorry, I haven’t come across any Chrome articles referencing it. However we already know how good Chrome was with a low IL, well untrusted is even stricter as to what can be done to the system. The in-built PDF is now already running as untrusted and I’m guessing over the next few versions we’ll be using pepper flash as you can already use it in the dev channel. And because pepper flash runs in the Chrome sandbox it will be running as untrusted which is great against any potential flash exploits whilst also eliminating the need for the medium IL broker process currently in use (not needed with pepper flash). Some of us don’t use an AV or the like, so I don’t just look at Chrome as a browser but also as a security program, so any hardening of Chromes already impressive sandboxing structure is welcomed.

[Page42]

But I'm saying, where is there info that confirms that the untrusted integrity level change happened in Chrome 20?

[JimboW]

None that I'm aware of, but you can see it with Process Explorer.

[Page42]

TY :thumb:

[moontan]

-{ Quote: "None that I'm aware of, but you can see it with Process Explorer." }-

confirmed.

on my machine the Google children/sub-processes are running as "Untrusted" instead of "Low" like they were before.

i don't know the difference between the two but "Untrusted" sounds a lot safer than "Low". ;)

[vasa1]

I looked at about:flags after quite a few months and the list is much longer than I remember. I was looking to turn on click-to-play because I remember it being in about:flags but it wasn't there. Turns out it's been made regular but I don't know in which Chrome version this happened.

[Hungry Man]

-{ Quote: "i don't know the difference between the two but "Untrusted" sounds a lot safer than "Low". " }-
Low Integrity means that the process can write to low integrity files and folders. Untrusted Integrity means that the process can only write to untrusted files and folders - there are no untrusted files/ folder by default therefor Chrome's renderer no longer has any write access to the system.

There are more changes to the sandbox coming soon.

@Vasa,

That was a while back.

This version contained hundreds of bug fixes.

[vasa1]

@HM, I thought you'd be busy keeping an eye on things over at Google I/O.

[Page42]

The Beta and Stable channel has been updated to 20.0.1132.47 for Windows, Mac, Linux, and Chrome Frame. This release disables some of Chrome’s GPU acceleration features on Mac hardware containing the Intel HD 4000 graphics chip (e.g. the new Macbook Airs), in order to prevent a resource leak which is causing a kernel panic on that hardware. This is a temporary change while we work on fixing the root cause of the issue.

[vasa1]

-{ Quote: "... This is a temporary change while we work on fixing the root cause of the issue." }-
And that means at least one more update in the pipes on this issue. Some Linux users are having problems as well with Chrome 20: for some of them, Chrome won't start and they see zombies instead; for others, Flash is a problem.
I've turned off updates until something necessary comes around because Chrome 20 is working just fine for me.

[Page42]

I wonder how frequently both the Beta and Stable channels are simultaneously updated to the same version number? Probably not very often.
-{ Quote: "I've turned off updates until something necessary comes around because Chrome 20 is working just fine for me." }-
20 is doing fine for me as well. In the (almost) one year that I have been using Chrome as my default browser, I have never experienced a problem with an update.

[JRViejo]

FYI. Google Chrome Portable 20.0.1132.47 Stable (web browser) Released (http://portableapps.com/news/2012-06-29--google-chrome-portable-20.0.1132.47-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[moontan]

-{ Quote: "FYI. Google Chrome Portable 20.0.1132.47 Stable (web browser) Released (http://portableapps.com/news/2012-06-29--google-chrome-portable-20.0.1132.47-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com." }-

seems like a 'minor' update, from what i can gather:

-{ Quote: "This release disables some of Chrome’s GPU acceleration features on Mac hardware containing the Intel HD 4000 graphics chip (e.g. the new Macbook Airs), in order to prevent a resource leak which is causing a kernel panic on that hardware. This is a temporary change while we work on fixing the root cause of the issue." }-

[vasa1]

-{ Quote: "I wonder how frequently both the Beta and Stable channels are simultaneously updated to the same version number? Probably not very often.
..." }-
It's not uncommon for a few days immediately following the release of a stable version that both stable and beta have the same version number.

[Page42]

-{ Quote: "It's not uncommon for a few days immediately following the release of a stable version that both stable and beta have the same version number." }-
Yes, I agree, but that is not what happened.
Both the stable and the beta were simultaneously updated at the same time to the same number...
-{ Quote: "The Beta and Stable channel has been updated to 20.0.1132.47" }-
See what I mean?

[JRViejo]

FYI. Google Chrome Portable 20.0.1132.57 Stable (web browser) Released (http://portableapps.com/news/2012-07-11--google-chrome-portable-20.0.1132.57-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[Page42]

The Stable channel has been updated to 20.0.1132.57 for Windows, Mac, Linux, and Chrome Frame.

Along with below mentioned security fixes, this build contains an update to Flash player, v8 (3.10.8.20) and couple of stability/bug fixes.

Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[$1000] [129898] High CVE-2012-2842: Use-after-free in counter handling. Credit to miaubiz.
[$1000] [130595] High CVE-2012-2843: Use-after-free in layout height tracking. Credit to miaubiz.
[133450] High CVE-2012-2844: Bad object access with JavaScript in PDF. Credit to Alexey Samsonov of Google.

[Page42]

-{ Quote: "12 July 2012, 11:20
Chrome 20 update fixes high-risk security vulnerabilities
Google has published a new update to the stable 20.x branch of Chrome to close a number of security holes in the WebKit-based web browser. Version 20.0.1132.57 of Chrome addresses a total of three vulnerabilities, all of which are rated as "high severity" by the company.
These include two use-after-free errors in counter handling and in layout height tracking that were discovered by a security researcher by the name of "miaubiz". As part of its Chromium Security Vulnerability Rewards program, Google paid the researcher, who is number three in the company's Security Hall of Fame, $1,000 for discovering and reporting each of the holes. A third high-risk problem related to object access with JavaScript in PDFs has also been corrected. As usual, further details about the vulnerabilities are being withheld until "a majority of users are up-to-date with the fix". Other changes include stability improvements, and updates to the V8 JavaScript engine and the built-in Flash player plug-in." }-
From The H Open (http://www.h-online.com/open/news/item/Chrome-20-update-fixes-high-risk-security-vulnerabilities-1637304.html)

[Page42]

The Stable channel has been updated to 21.0.1180.57 for Mac and Linux and 21.0.1180.60 for Windows and Chrome Frame. Chrome 21 contains a number of new features including a new API for high-quality video and audio communication.

[JRViejo]

FYI. Google Chrome Portable 21.0.1180.60 Stable (web browser) Released (http://portableapps.com/news/2012-07-31--google-chrome-portable-21.0.1180.60-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[m00nbl00d]

Google makes it difficult to download the latest version. I went to their website to download the alternative installer, which installs to Program Files directory, and it downloaded the previous version.

Now, I tried to download using a different link, and by prefixing the version number in front of the installer name. Let's see if it will download the latest version. :argh:

[JimboW]

This release now has Peperflash as the default which means it's running in the sandbox with the Untrusted IL. :thumb:

[EboO]

NPAPI is also actived. Do i need to desactive ?
Thanks.

[Page42]

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame.

This build fixes:
Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing (Issue: 140366).
Flash video full screen displays on wrong monitor (Issue: 137523)
REGRESSION: Rendering difference in Chrome 21 and 22 that affected on Persian Wikipedia (Issue: 139502)
Some known crashes (Issues: 137498, 138552, 128652, 140140)
Audio objects are not "switched" immediately (Issue: 140247)
Print and Print Preview ignore paper size default in printer config (Issue: 135374)
Candidate windows is shown in wrong place in Retina display (Issue: 139108)
more of the choppy and distorted audio issues (Issue: 136624)
Japanese characters showing in Chinese font (Issue: 140432)
Video playback issues with flash-based sites (Issue: 139953)
Sync invalidation notification broken after restart (Issue: 139424)
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[136643] [137721] [137957] High CVE-2012-2862: Use-after-free in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[136968] [137361] High CVE-2012-2863: Out-of-bounds writes in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.

[JRViejo]

FYI. Google Chrome Portable 21.0.1180.75 Stable (web browser) Released (http://portableapps.com/news/2012-08-09--google-chrome-portable-21.0.1180.75-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[m00nbl00d]

This is becoming annoying. The latest two updates (this one included) removed the extensions from my relative's profile; re-enabled all plugins, including Java. :wacko:

Did this happen to anyone else? ???

[Page42]

Yes, annoying would be a good word for that, m00n.
Did you report it?
Annoying is also a good word for the printing problem (posted in this thread (http://www.wilderssecurity.com/showthread.php?p=2097129#post2097129)) that the last update caused me, and continues with this latest build.
I notice that a printing issue was addressed in 21.0.1180.75...
-{ Quote: "Print and Print Preview ignore paper size default in printer config" }-
I sincerely hope the next build provides a fix for what I am seeing.
I did report the problem.

[DBone]

If you guys like Chrome, then you should try Comodo Dragon. All that Chrome has to offer, with none of the crap, including 1/2 baked "updates". I gave up Chrome as soon as I found Dragon.

[Page42]

I've heard this from you before, DB.
Perhaps one of these days your words will sink in. ;)
You've made me want to learn more, that much is true.
Appreciate the input.

[Page42]

-{ Quote: "If you guys like Chrome, then you should try Comodo Dragon. All that Chrome has to offer, with none of the crap, including 1/2 baked "updates". I gave up Chrome as soon as I found Dragon." }-
Hey DBone... question for you regarding Dragon.
Do the webpages all have that red triangle in the lower right corner, along with the authentication pop-up box that appears when you hover over it?

234113
234114

[DBone]

Nope, never seen that before.

edit: I see where you found that, at the Comodo forums website. No other web pages ever have that.

[Page42]

It's on every page in the Comodo forum.
Or try here (http://www.comodo.com/home/browsers-toolbars/browser.php).

Updates from Chrome like the one before last are almost enough to drive me away.
Almost.

[Page42]

-{ Quote: "edit: I see where you found that, at the Comodo forums website. No other web pages ever have that." }-
Go to http://www.comodo.com and you'll see it, and on every link listed there. ;)

[JRViejo]

Page42, that seal is being provided by www.trustlogo.com, as per my Firefox's NoScript add-on. Just FYI.

[Page42]

-{ Quote: "Page42, that seal is being provided by www.trustlogo.com, as per my Firefox's NoScript add-on. Just FYI." }--{ Quote: "TrustLogo is one of the many trust and security solutions available through Comodo, and developed by the Comodo Research Lab." }-
Might as well say it's provided by Comodo, JR. ;)

[JRViejo]

-{ Quote: "Might as well say it's provided by Comodo, JR. ;)" }-
Of course, and it should be obvious visiting that link. ;)

Since I block everything, but the main domain, I never see any site's frills. ;D

[Page42]

I needed to confirm that Dragon wasn't plastered with that logo crap. :)

[DBone]

-{ Quote: "I needed to confirm that Dragon wasn't plastered with that logo crap. :)" }-

Rest assured, it isn't. The only thing you may or may not miss, is the PDF plugin. Dragon doesn't have it.

[Page42]

-{ Quote: "The only thing you may or may not miss, is the PDF plugin. Dragon doesn't have it." }-
I was just gonna ask you that.
How about a print preview?
And a sandbox?
And extensions?
And bookmark import function?

[Hungry Man]

It should have the same sandbox. It's just Chromium reskinned and with a few certificate features added. At one point there were some more significant features in Dragon but Chromium implemented them to the native code.

You lose bundled Flash. You lose the bundled PDF.

Otherwise it works pretty much the same.

[Page42]

Seriously, bundled Flash is huge, imo.
Same extensions?
Same sandbox?
Better security, really? :-\

[Page42]

The Stable channel has been updated to 21.0.1180.77.

[wat0114]

Got it, thanks Page!

[Page42]

You're welcome, wat!
Looks like a pretty minor update...
-{ Quote: "This build fixes a problem with an item in Node::attributes disappearing" }-

[Page42]

The Stable channel has been updated to 21.0.1180.79.

Don't know yet what the update is for, but it could be to fix a problem with Flash Player. Just guessing. :)

[Hungry Man]

It's supposed to be Flash bugfixes. This will probably be common for a few more updates as the PPAPI just rolled out.

[wat0114]

Thanks again, Page!

the update re-enabled the NPSWF32_11_x_xxx_xxx.dll plugin that I had disabled (along with the gcswf32.dll). I had only the pepflashplayer.dll enabled. Not a big deal to disable again until Google hopefully fixes it, but obviously something to be aware of. I think I've seen where others in these forums have encountered this as well.

[Page42]

-{ Quote: "This build fixes a security issue with Adobe Flash." }-
Karen Grunberg
Google Chrome (http://google-chrome-browser.com/stable-channel-has-been-updated-210118079-mac-linux-windows-and-chrome-frame)

@ wat0114 ... You're welcome!

[JRViejo]

FYI. Google Chrome Portable 21.0.1180.79 Stable (web browser) Released (http://portableapps.com/news/2012-08-14--google-chrome-portable-21.0.1180.79-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[Dundertaker]

-{ Quote: "FYI. Google Chrome Portable 21.0.1180.79 Stable (web browser) Released (http://portableapps.com/news/2012-08-14--google-chrome-portable-21.0.1180.79-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com." }-

Is there a standalone offline download for the portable one..? I seem to remember that Iron has one not from PortableApps...

[mrpink]

-{ Quote: "Is there a standalone offline download for the portable one..? I seem to remember that Iron has one not from PortableApps..." }-
If you have a previous version, you can just update Chrome files manually. Download Chrome's installer, extract the files and put them inside GoogleChromePortable\App\Chrome-bin

[Page42]

The Stable channel has been updated to 21.0.1180.81 for Linux, 21.0.1180.83 for Windows and Chrome Frame and both Beta and Stable channels have been updated to 21.0.1180.82 for Mac and

This build fixes the following issues:
Duplex Printing defaults to Yes, which prints extra pages even for a 1 page print out (Issue 138312).
Print preview takes forever on Win XP (issue: 140044)
Anti-DDoS inversion of logic (Issues: 141643, 141081)
Pepper Flash: in file uploads, treats HTTP status != 200 as failure, breaking (e.g.) uploads to Amazon S3 (Issue: 140468)
Projectmanager.com application causes Flash to hang (Issue: 141018)
Turn off TLS 1.1 in Chrome 21 Stable (Issue: 142172)
Setting and unsetting display:none obliterates current scroll position (issue: 140101)
These builds also have a new version of Flash with security and other fixes.

[JRViejo]

FYI. Google Chrome Portable 21.0.1180.83 Stable (web browser) Released (http://portableapps.com/news/2012-08-21--google-chrome-portable-21.0.1180.83-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[Page42]

The Stable channel has been updated to 21.0.1180.89 (http://googlechromereleases.blogspot.com/2012/08/stable-channel-update_30.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+blogspot%2FdbusP+%28Google+Chrome+Releases%29) for Linux, Mac, Windows and Chrome Frame

This build fixes the following issues:
Several Pepper Flash fixes (Issue 140577, 144107, 140498, 142479).
Microphone issues with tinychat.com (Issue: 143192)
devtools regression with "save as" of edited source (issue: 141180)
mini ninjas shaders fails (Issue: 142705)
page randomly turns red/green gradient boxes (Issue: 110343)
Security fixes and rewards:
Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[$500] [121347] Medium CVE-2012-2865: Out-of-bounds read in line breaking. Credit to miaubiz.
[$1000] [134897] High CVE-2012-2866: Bad cast with run-ins. Credit to miaubiz.
[135485] Low CVE-2012-2867: Browser crash with SPDY.
[$500] [136881] Medium CVE-2012-2868: Race condition with workers and XHR. Credit to miaubiz.
[137778] High CVE-2012-2869: Avoid stale buffer in URL loading. Credit to Fermin Serna of the Google Security Team.
[138672] [140368] Low CVE-2012-2870: Lower severity memory management issues in XPath. Credit to Nicolas Gregoire.
[$1000] [138673] High CVE-2012-2871: Bad cast in XSL transforms. Credit to Nicolas Gregoire.
[$500] [142956] Medium CVE-2012-2872: XSS in SSL interstitial. Credit to Emmanuel Bronshtein.

[JRViejo]

FYI. Google Chrome Portable 21.0.1180.89 Stable (web browser) Released (http://portableapps.com/news/2012-08-30--google-chrome-portable-21.0.1180.89-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com.

[Page42]

Since the last Chrome update I get the following error message with Ghostery: "This extension failed to modify a network request because the modification conflicted with another extension".
This is displayed as a small, clickable orange exclamation mark on the Chrome wrench.

I've noticed also that a couple of other extensions suddenly were grayed out... WOT on one machine and AdBlock on another. The timing (with the recent Chrome update) is either very coincidental or very related. :)

[Pinga]

-{ Quote: "FYI. Google Chrome Portable 21.0.1180.89 Stable (web browser) Released (http://portableapps.com/news/2012-08-30--google-chrome-portable-21.0.1180.89-released) for PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) users, courtesy of PortableApps.com." }-
This New Apps Every Week: column on the PortableApps product page makes it impossible to automatically scan the page for updates. Is there a solution for that?

[JRViejo]

-{ Quote: "This New Apps Every Week: column on the PortableApps product page makes it impossible to automatically scan the page for updates. Is there a solution for that?" }-
Pinga, at the end of that column, there is an and more link, that takes you to this page: http://portableapps.com/news/new and that's where all the New Apps are listed. They are also listed in the main PortableApps.com Releases and News (http://portableapps.com/news) page.

What are you using to "automatically scan" the page?

[Pinga]

Thanks for that, JR. I'm using Page Monitor:

https://chrome.google.com/webstore/detail/pemhgklkefakciniebenbfclihhmmfcd

It's set up to alert me, among other things, whenever

http://portableapps.com/apps/internet/google_chrome_portable

changes, which typically happens when a new version comes out. Now if that same page also contains
-{ Quote: "New Apps Every Week: Sqliteman, PicPick, AIMP, FotoSketcher, MicroSIP, Lynx, Free Download Manager, Dicom, and more....
New PortableApps.com Platform 10.1 =|= World's Best Flash Drive: The PortableApps.com Companion - 3 New Colors!" }-
there is very little point in monitoring it ;D

[JRViejo]

-{ Quote: "Thanks for that, JR. I'm using Page Monitor:" }-
Pinga, you're welcome! Also, thanks for letting me know what you were using. Take care.

[Pinga]

I will, but we haven't solved the problem yet. There must be many people that use one or two PortableApps and will occasionally want to check the site for updates. They don't necessarily want to know about all updates, let alone this whole New Apps Every Week thing. One dedicated page for each app that only changes when there's a new version would be ideal.

[JRViejo]

-{ Quote: "There must be many people that use one or two PortableApps and will occasionally want to check the site for updates." }-
Well, you don't have to check the site, because the PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) provides a feature, via Options > Advanced tab, to check for updates on platform start-up, and those who use the platform would always be up-to-date.

[Pinga]

-{ Quote: "Well, you don't have to check the site, because the PA Platform (http://portableapps.com/news/2012-06-14--portableapps.com-platform-10.1-released) provides a feature, via Options > Advanced tab, to check for updates on platform start-up, and those who use the platform would always be up-to-date." }-
Adding a 'platform' to what is supposed to be making one's life less complicated is an oxymoron... Fortunately, many apps on the portableapps.com are natively portable, even without the portableapps.com bloat. Less is more ;)

[Page42]

The Stable channel has been updated to 22.0.1229.79.
(The wrench icon in the toolbar is gone. How long has that been gone? Maybe this version release got rid of it?)

[Osaban]

-{ Quote: "The Stable channel has been updated to 22.0.1229.79.
(The wrench icon in the toolbar is gone. How long has that been gone? Maybe this version release got rid of it?)" }-
Thanks Page, you don't miss anything do you? The wrench icon has definitely disappeared with this update.

[Hungry Man]

Quite a number of serious and critical vulnerabilities. I think with the vulnerabilities in this cycle alone you could get out of a Windows sandbox.

UXSS and a kernel exploit. That sounds like plenty to me.

[Page42]

-{ Quote: "Thanks Page, you don't miss anything do you? The wrench icon has definitely disappeared with this update." }-
You're welcome, Osaban. Hard to overlook a missing wrench on the toolbar. ;D

[Trooper]

-{ Quote: "You're welcome, Osaban. Hard to overlook a missing wrench on the toolbar. ;D" }-

Indeed I noticed today as well when I updated.

Glad to hear of more security fixes too. ;)

[Page42]

-{ Quote: "Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 22 to the stable channel. Chrome 22.0.1229.79 (also now available on the beta channel) has a number of new and exciting updates including:

Mouse Lock API availability for Javascript
Additional Windows 8 enhancements
Continued polish for users of HiDPI/Retina screens
You can find out more about Chrome 22 on the Official Chrome Blog (http://chrome.blogspot.com/2012/09/a-chrome-update-with-side-of-gaming.html).

Security fixes and rewards:

Please see the Chromium security page (https://sites.google.com/a/chromium.org/dev/Home/chromium-security) for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Occasionally, we issue special rewards for bugs outside of Chrome, particularly where the bug is very severe and/or we are able to partially work around the issue:

[$5000] [146254] Critical CVE-2012-2897: Windows kernel memory corruption. Credit to Eetu Luodemaa and Joni Vähämäki, both from Documill.

And back to your regular scheduled rewards, including some at the new higher levels:

[$10000] [143439] High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov.
[$5000] [143437] High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov.
[$2000] [139814] High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva.
[$1000] [135432] High CVE-2012-2876: Buffer overflow in SSE2 optimizations. Credit to Atte Kettunen of OUSPG.
[$1000] [140803] High CVE-2012-2883: Out-of-bounds write in Skia. Credit to Atte Kettunen of OUSPG.
[$1000] [143609] High CVE-2012-2887: Use-after-free in onclick handling. Credit to Atte Kettunen of OUSPG.
[$1000] [143656] High CVE-2012-2888: Use-after-free in SVG text references. Credit to miaubiz.
[$1000] [144899] High CVE-2012-2894: Crash in graphics context handling. Credit to Sławomir Błażek.
[Mac only] [$1000] [145544] High CVE-2012-2896: Integer overflow in WebGL. Credit to miaubiz.
[$500] [137707] Medium CVE-2012-2877: Browser crash with extensions and modal dialogs. Credit to Nir Moshe.
[$500] [139168] Low CVE-2012-2879: DOM topology corruption. Credit to pawlkt.
[$500] [141651] Medium CVE-2012-2884: Out-of-bounds read in Skia. Credit to Atte Kettunen of OUSPG.
[132398] High CVE-2012-2874: Out-of-bounds write in Skia. Credit to Google Chrome Security Team (Inferno).
[134955] [135488] [137106] [137288] [137302] [137547] [137556] [137606] [137635] [137880] [137928] [144579] [145079] [145121] [145163] [146462] Medium CVE-2012-2875: Various lower severity issues in the PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[137852] High CVE-2012-2878: Use-after-free in plug-in handling. Credit to Fermin Serna of Google Security Team.
[139462] Medium CVE-2012-2880: Race condition in plug-in paint buffer. Credit to Google Chrome Security Team (Cris Neckar).
[140647] High CVE-2012-2882: Wild pointer in OGG container handling. Credit to Google Chrome Security Team (Inferno).
[142310] Medium CVE-2012-2885: Possible double free on exit. Credit to the Chromium development community.
[143798] [144072] [147402] High CVE-2012-2890: Use-after-free in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team.
[144051] Low CVE-2012-2891: Address leak over IPC. Credit to Lei Zhang of the Chromium development community.
[144704] Low CVE-2012-2892: Pop-up block bypass. Credit to Google Chrome Security Team (Cris Neckar).
[144799] High CVE-2012-2893: Double free in XSL transforms. Credit to Google Chrome Security Team (Cris Neckar).
[145029] [145157] [146460] High CVE-2012-2895: Out-of-bounds writes in PDF viewer. Credit to Mateusz Jurczyk of Google Security Team, with contributions by Gynvael Coldwind of Google Security Team." }-

Google Chrome Releases (http://googlechromereleases.blogspot.com/)

[JRViejo]

FYI. Google Chrome Portable 22.0.1229.79 Stable (web browser) Released (http://portableapps.com/news/2012-09-25--google-chrome-portable-22.0.1229.79-released) for PA Platform (http://portableapps.com/news/2012-09-17--portableapps.com-platform-10.2-released) users, courtesy of PortableApps.com.

[Page42]

The Chrome Stable Channel has been updated to version 23.0.1271.64 m.
-{ Quote: "Chrome 23 contains a number of new features including GPU accelerated video decoding on Windows and easier website permissions." }-

[mrpink]

Were you so anxious that nobody starts a new thread about Chrome 23 that you didn't had the time to provide a download link? ;D

Offline
-http://dl.google.com/chrome/win/D82AE32A83676668/23.0.1271.64_chrome_installer.exe

Changelog (googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html)

[Page42]

-{ Quote: "Were you so anxious that nobody starts a new thread about Chrome 23 that you didn't had the time to provide a download link? ;D

Offline
-http://dl.google.com/chrome/win/D82AE32A83676668/23.0.1271.64_chrome_installer.exe" }-
You can start all the new threads you like.
And I always update Chrome internally, so no link needed.

[pandorax]

It connects keepa.com at startup. It is amazon price tracker whatever! Wth?

[JRViejo]

Removed Off Topic Posts.

[Mman79]

-{ Quote: "It connects keepa.com at startup. It is amazon price tracker whatever! Wth?" }-

Make a new thread on it so it can be discussed without posts being deleted and people left wondering what you're talking about ((since you've mentioned this in two separate threads.)).

[pandorax]

-{ Quote: "Make a new thread on it so it can be discussed without posts being deleted and people left wondering what you're talking about ((since you've mentioned this in two separate threads.))." }-
Latest Chrome connects to keepa.com at every launch. Observed with tcpview. Waiting someone's confirmation!

[Mman79]

What I'm saying is make a thread about it instead of driving this thread off topic because you know these posts will get deleted soon.

[Page42]

-{ Quote: "Latest Chrome connects to keepa.com at every launch. Observed with tcpview. Waiting someone's confirmation!" }-
I don't see it happening using TCPView.

[pandorax]

-{ Quote: "I don't see it happening using TCPView." }-
Interesting. I was on win 8 testing. Reverted back to win 7 now, so i don't have chrome now. Maybe it is somehow related to win 8? lol

Be careful, connection disappear immediately.

[Mman79]

-{ Quote: "I don't see it happening using TCPView." }-


I'm sorry mods, I just wanted to add one little thing here. This might explain why you're seeing Keepa.com, Pandorax: https://chrome.google.com/webstore/detail/the-tracktor-amazon-price/onajjgekdldckfgodnmoallcmdmfcfom.

Do you have that installed?

[pandorax]

-{ Quote: "I'm sorry mods, I just wanted to add done little thing here. This might explain why you're seeing Keepa.com, Pandorax: https://chrome.google.com/webstore/detail/the-tracktor-amazon-price/onajjgekdldckfgodnmoallcmdmfcfom.

Do you have that installed?" }-
No. Only adblock, noreferer and https everywhere were installed.

[Page42]

FWIW, I don't see it on XP or on W7.
And you mentioned AdBlock. Perhaps you mean AdBlockPlus, don't know, but again, I do have AdBlock installed on both of the machines I mentioned and I don't see them connecting to keepa.com.
:)

[pandorax]

I installed chrome again and found the culprit. Referer Control extension causes this. https://chrome.google.com/webstore/detail/referer-control/hnkcfpcejkafcihlgbojoidoihckciin

Actually it says from keepa.com on webstore! I saw it now! So what is the relation between controlling referer and amazon price tracker?

[Mman79]

Again, if it concerns you enough, make a new thread on it.

[JRViejo]

FYI. Google Chrome Portable 22.0.1229.79 Stable (web browser) Released (http://portableapps.com/news/2012-11-07--google-chrome-portable-23.0.1271.64-released) for PA Platform (http://portableapps.com/news/2012-10-14--portableapps.com-platform-11.2-released) users, courtesy of PortableApps.com.

[tlu]

-{ Quote: "I installed chrome again and found the culprit. Referer Control extension causes this. https://chrome.google.com/webstore/detail/referer-control/hnkcfpcejkafcihlgbojoidoihckciin

Actually it says from keepa.com on webstore! I saw it now! So what is the relation between controlling referer and amazon price tracker?" }-

Well, if you don't want to remove Referer Control you can add the following command line switch (http://peter.sh/experiments/chromium-command-line-switches/) as a start parameter:

--host-rules="MAP https://ssl.google-analytics.com 127.0.0.1","MAP *.google-analytics.com 127.0.0.1","MAP *.googleadservices.com 127.0.0.1","MAP *.doubleclick.net 127.0.0.1","MAP *.keepa.com 127.0.0.1"

Note that I added the other domains because I found entries for google-analytics in the Chrome cache after every start although Fanboy's Tracking list in Adblock should have blocked them. The same was true for doubleclick.net after going to the Chrome webstore. With those host-rules they are reliably blocked. I found that the extra rule for ssl.google-analytics.com was necessary to have it blocked.

[m00nbl00d]

-{ Quote: "Well, if you don't want to remove Referer Control you can add the following command line switch (http://peter.sh/experiments/chromium-command-line-switches/) as a start parameter:

--host-rules="MAP https://ssl.google-analytics.com 127.0.0.1","MAP *.google-analytics.com 127.0.0.1","MAP *.googleadservices.com 127.0.0.1","MAP *.doubleclick.net 127.0.0.1","MAP *.keepa.com 127.0.0.1"
" }-

You should consider two things. First, "MAP *.google-analytics.com 127.0.0.1" covers the first rule as well, so no need for the first rule. Second, "MAP *.keepa.com 127.0.0.1" will only block access to keepa subdomains, but not the main domain itself, so a rule mapping the main domain is also needed, if one needs to block access to it as well.

-{ Quote: "
Note that I added the other domains because I found entries for google-analytics in the Chrome cache after every start although Fanboy's Tracking list in Adblock should have blocked them. The same was true for doubleclick.net after going to the Chrome webstore. With those host-rules they are reliably blocked. I found that the extra rule for ssl.google-analytics.com was necessary to have it blocked." }-

I noticed that quite sometime ago. Apparently, for security reasons, Google won't allow Chrome extension developers to modify Chrome Web Store page.

[tlu]

-{ Quote: "You should consider two things. First, "MAP *.google-analytics.com 127.0.0.1" covers the first rule as well, so no need for the first rule." }-

Well, that's what I had thought, too. I had had only the second rule but ssl.GA had nevertheless appeared. In order to check it I've now deleted the first rule - and couldn't reproduce my earlier finding. So you're obviously right on this.

-{ Quote: "Second, "MAP *.keepa.com 127.0.0.1" will only block access to keepa subdomains, but not the main domain itself, so a rule mapping the main domain is also needed, if one needs to block access to it as well." }-

You're right on this, too. Do you know if it's possible to combine both? Is it possible to use regex?

-{ Quote: "I noticed that quite sometime ago. Apparently, for security reasons, Google won't allow Chrome extension developers to modify Chrome Web Store page." }-

Indeed. That's why those host-rules are really useful.

[m00nbl00d]

-{ Quote: "[...]
You're right on this, too. Do you know if it's possible to combine both? Is it possible to use regex?
" }-

Nope, no regex. :( Maybe if someone asks as a feature to the Chromium team. :doubt:
Anyway, what you want could be achieved by using Google Chrome policy templates instead.

-https://support.google.com/a/bin/answer.py?hl=en&answer=187945
-http://www.chromium.org/administrators/policy-list-3

The keys to use would be:
-http://www.chromium.org/administrators/policy-list-3#URLBlacklist
-http://www.chromium.org/administrators/policy-list-3#URLWhitelist

[pandorax]

-{ Quote: "Well, if you don't want to remove Referer Control you can add the following command line switch (http://peter.sh/experiments/chromium-command-line-switches/) as a start parameter:

--host-rules="MAP https://ssl.google-analytics.com 127.0.0.1","MAP *.google-analytics.com 127.0.0.1","MAP *.googleadservices.com 127.0.0.1","MAP *.doubleclick.net 127.0.0.1","MAP *.keepa.com 127.0.0.1"

Note that I added the other domains because I found entries for google-analytics in the Chrome cache after every start although Fanboy's Tracking list in Adblock should have blocked them. The same was true for doubleclick.net after going to the Chrome webstore. With those host-rules they are reliably blocked. I found that the extra rule for ssl.google-analytics.com was necessary to have it blocked." }-
Thanks for the information. Using Firefox though. I will keep in my mind.

[tlu]

-{ Quote: "Nope, no regex. :( Maybe if someone asks as a feature to the Chromium team. :doubt:
Anyway, what you want could be achieved by using Google Chrome policy templates instead.
" }-

Thanks :thumb: I had looked into this before and will check again if that will serve my purposes.

BTW: The description for URLBlacklist says:
-{ Quote: "To prevent blocking subdomains, include a '.' before the hostname." }-
That's the reason why I had used a '.' in my host-rules before (and because that's the syntax also used in the Noscript ABE rules) - but that didn't work as discussed in another thread ;) I had missed the word "prevent". The asterisk is necessary.

[Page42]

BleachBit is having a little error issue with Chrome 23 favicons.
Nothing on their forum as of yet. Not a big deal, I just use BB in conjunction with CC. ;)

[SirDrexl]

One little touch that I really like (which I think is new in 23) is how the closing X on the tabs will turn into a red circle when you hover the cursor over it. It makes it a little easier to know when you're about to select a tab versus close it.

[Kees1958]

-{ Quote: "Well, if you don't want to remove Referer Control you can add the following command line switch[/URL] as a start parameter:" }-

You mean this one ;D http://peter.sh/experiments/chromium-command-line-switches/#no-referrers

Works great, i use --no-referrers and --incognito

[Page42]

-{ Quote: "One little touch that I really like (which I think is new in 23) is how the closing X on the tabs will turn into a red circle when you hover the cursor over it. It makes it a little easier to know when you're about to select a tab versus close it." }-
It probably is a new UI tweak.
Good eye.
I like it too.

[Page42]

The Stable channel has been updated to 23.0.1271.91 for Windows, Mac, Linux, and ChromeFrame platforms.

This version fixes several issues including:

No audio from Flash content when speaker configuration is set to Quadraphonic (Issue: 159924)
Aw, Snap renderer crash on Windows Server 2003 (Issue: 160559)


Security fixes and rewards:

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Occasionally, we issue special rewards for bugs outside of Chrome, particularly where the bug is very severe and/or we are able to partially work around the issue:

[$1000] [152746] High CVE-2012-5131: Corrupt rendering in the Apple OSX driver for Intel GPUs. Credit to Justin Drake.

And back to your regular scheduled rewards:

[$1000] [156567] High CVE-2012-5133: Use-after-free in SVG filters. Credit to miaubiz.
[$500] [148638] Medium CVE-2012-5130: Out-of-bounds read in Skia. Credit to Atte Kettunen of OUSPG.
[155711] Low CVE-2012-5132: Browser crash with chunked encoding. Credit to Attila Szász.
[158249] High CVE-2012-5134: Buffer underflow in libxml. Credit to Google Chrome Security Team (Jüri Aedla).
[159165] Medium CVE-2012-5135: Use-after-free with printing. Credit to Fermin Serna of Google Security Team.
[159829] Medium CVE-2012-5136: Bad cast in input element handling. Credit to Google Chrome Security Team (Inferno).

[JRViejo]

FYI. Google Chrome Portable 23.0.1271.91 Stable (web browser) Released (http://portableapps.com/news/2012-11-26--google-chrome-portable-23.0.1271.91-released) for PA Platform (http://portableapps.com/news/2012-10-14--portableapps.com-platform-11.2-released) users, courtesy of PortableApps.com.

[Page42]

The Stable channel has been updated to 23.0.1271.95 for Windows, Mac, Linux, and ChromeFrame platforms.

Security fixes and rewards:

Please see the Chromium security page (https://sites.google.com/a/chromium.org/dev/Home/chromium-security) for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

[161564] High CVE-2012-5138: Incorrect file path handling. Credit to Google Chrome Security Team (Jüri Aedla).
[$7331] [162835] High CVE-2012-5137: Use-after-free in media source handling. Credit to Pinkie Pie.

Congratulations to Pinkie Pie for completing challenge: 64-bit exploit.

[JRViejo]

FYI. Google Chrome Portable 23.0.1271.95 Stable (web browser) Released (http://portableapps.com/news/2012-11-29--google-chrome-portable-23.0.1271.95-released) for PA Platform (http://portableapps.com/news/2012-10-14--portableapps.com-platform-11.2-released) users, courtesy of PortableApps.com.

[Page42]

The Stable channel has been updated to 23.0.1271.97.

[SirDrexl]

I'm not sure where to ask this, but is anyone else getting an "extension error" with HTTPS Everywhere recently? If I enable developer mode I get the message "This extension failed to modify a network request because the modification conflicted with another extension" under it. The only other extensions I have at the moment are ABP, ChromeIPass, and Do Not Track Me.

[Hungry Man]

IDK about chromePass, but the other two extensions use webrequest API, which HTTPS Everywhere uses. So I'd say it's Do Not Track Me conflicting.

[JimboW]

Just re-installed Chrome after having been using Chromium for a little while and I noticed that the installer now installs into the Program Files folder by default rather than AppData. Don't know if anyone has noticed this, but thought I'd give it a mention.

[Bodhitree]

-{ Quote: "Just re-installed Chrome after having been using Chromium for a little while and I noticed that the installer now installs into the Program Files folder by default rather than AppData. Don't know if anyone has noticed this, but thought I'd give it a mention." }-

Correct. I am running Version 25.0.1364.5 dev-m and it installs there, so all subsequent ones will also.

I tend to run dev versions because they have fixes much faster, and exploits are patched almost immediately. Although I prefer Chromium, Chromium doesn't auto update. Not a fan of autoupdates, but I manage far far too many computers to not have it.. Updating Chromium every week was becoming a nuisance.

[Page42]

The Chrome team is excited to announce the promotion of Chrome 24 to the stable channel. Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame.
This release also contains an update to Flash (11.5.31.137) as well as improvements in speed and stability.

[Mman79]

-{ Quote: "The Chrome team is excited to announce the promotion of Chrome 24 to the stable channel. Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame.
This release also contains an update to Flash (11.5.31.137) as well as improvements in speed and stability." }-

Now if they'd just update the Beta channel, lol. I'm still stuck on 24.0.1312.52, which is still labeled as beta and according to Google Update, still the latest they have for me.

[Osaban]

-{ Quote: "The Chrome team is excited to announce the promotion of Chrome 24 to the stable channel. Chrome 24.0.1312.52 has been updated for Windows, Mac, Linux, and Chrome Frame.
This release also contains an update to Flash (11.5.31.137) as well as improvements in speed and stability." }-
Well I don't know about you guys, but this time Chrome's update messed up my browsing big time. Clicking on any of my bookmarks would show me the opening page after 1 full minute! I've tried disabling my AV's webguard, opening Chrome without Sandboxie all to no avail. IE works perfectly well which means it is definitely Chrome's latest update.

I've just restored an image with Chrome before the update, and it is working normally. Anybody else experiencing these problems with a solution?

[DBone]

It's working fine here.

[jdd58]

-{ Quote: "Well I don't know about you guys, but this time Chrome's update messed up my browsing big time. Clicking on any of my bookmarks would show me the opening page after 1 full minute! I've tried disabling my AV's webguard, opening Chrome without Sandboxie all to no avail. IE works perfectly well which means it is definitely Chrome's latest update.

I've just restored an image with Chrome before the update, and it is working normally. Anybody else experiencing these problems with a solution?" }-

Not the same issue you have but Words with Friends on Facebook refuses to load with ver 24. Chrome 23 and 25 dev build work fine.

[Page42]

-{ Quote: "Now if they'd just update the Beta channel, lol. I'm still stuck on 24.0.1312.52, which is still labeled as beta and according to Google Update, still the latest they have for me." }-
The Chrome team is happy to announce the promotion of Chrome 25 to the beta channel for Windows, Mac, Linux and Chrome Frame. Chrome 25.0.1364.29 contains a number of new improvements, including:
Improvements in managing and securing your extensions
Continued testing of search and the new tab page
Better support for HTML5 time/date inputs
Javascript speech API support
Better WebGL error handling
And lots of other features for developers :thumb:

[Page42]

-{ Quote: "Well I don't know about you guys, but this time Chrome's update messed up my browsing big time. Clicking on any of my bookmarks would show me the opening page after 1 full minute! I've tried disabling my AV's webguard, opening Chrome without Sandboxie all to no avail. IE works perfectly well which means it is definitely Chrome's latest update.

I've just restored an image with Chrome before the update, and it is working normally. Anybody else experiencing these problems with a solution?" }-
Did you get it to run okay, Osaban? :)

[Mman79]

-{ Quote: "The Chrome team is happy to announce the promotion of Chrome 25 to the beta channel for Windows, Mac, Linux and Chrome Frame. Chrome 25.0.1364.29 contains a number of new improvements, including:
Improvements in managing and securing your extensions
Continued testing of search and the new tab page
Better support for HTML5 time/date inputs
Javascript speech API support
Better WebGL error handling
And lots of other features for developers :thumb:" }-

Took them long enough, lol. Thanks, Page.

[Osaban]

-{ Quote: "Did you get it to run okay, Osaban? :)" }-
Unfortunately not. Sometimes pages load up after a long time and at times they don't load at all. I was quite happy to stay with version 23, but the damn thing updates itself automatically. I'm using IE9 at the moment, I have sent a short description of my problem to Google, I hope with the next update they fix it. I might even try version 25 beta except I'm not really in the mood to investigate the problem, lately if anything happens I quickly restore an image.

[Mman79]

-{ Quote: "Unfortunately not. Sometimes pages load up after a long time and at times they don't load at all. I was quite happy to stay with version 23, but the damn thing updates itself automatically. I'm using IE9 at the moment, I have sent a short description of my problem to Google, I hope with the next update they fix it. I might even try version 25 beta except I'm not really in the mood to investigate the problem, lately if anything happens I quickly restore an image." }-


25 is working pretty well for me, Osaban. 24 seems to have some problems with slowdown, especially on heavy sites like TheVerge, Chive and some others.

[Osaban]

-{ Quote: "25 is working pretty well for me, Osaban. 24 seems to have some problems with slowdown, especially on heavy sites like TheVerge, Chive and some others." }-
I've just done a quick search on the Internet and it is a real epidemic with machines running Vista. The browser is practically unusable with this update.
Edit: They found the problem.
-{ Quote: "
1."Hardware accelerated on all pages and threaded":
■Type "chrome://flags" in the omnibox, and search for "Threaded compositing". Change the Default setting to Disabled. Now Relaunch Chrome (this will be a button at the bottom of the page). Did this help? " }- This worked for me, and there are other possibilities if this doesn't work, one can check this link:
http://productforums.google.com/forum/#!category-topic/chrome/o2teiQaad9Q

[Page42]

-{ Quote: "I was quite happy to stay with version 23, but the damn thing updates itself automatically." }-
Have you disabled Google Update in Plug-ins?
I see that you have found a solution via thread compositing (whatever that means), but I'm still curious about the updating.
All Chrome updates have been remarkably stable for me, since the exasperating "Aw, Snap!" fiasco I was experiencing about a year or so ago.

[ambient_88]

-{ Quote: "25 is working pretty well for me, Osaban. 24 seems to have some problems with slowdown, especially on heavy sites like TheVerge, Chive and some others." }-
If you don't mind, how is the scrolling when you go to Ars Technica? I find the scrolling for Ars Technica (as well as The Verge) really laggy/jerky even when using Chromium Wheel Smooth Scroller.

Thanks!

[Mman79]

-{ Quote: "If you don't mind, how is the scrolling when you go to Ars Technica? I find the scrolling for Ars Technica (as well as The Verge) really laggy/jerky even when using Chromium Wheel Smooth Scroller.

Thanks!" }-

Well, on Chrome 25 just using the default options for scrolling, I didn't notice any real lag. I can't re-check right now because Ars has taken a dive and went poof. The Verge, well, I've nearly stopped going there. In the last week, no matter what browser I use, it's practically unusable. I don't know if they've screwed with the coding, put some crazy, large ads up that I'm blocking and are still trying to load, or what. But, that place is a nightmare, and that's after I use up most of my patience waiting for the front page to load.

[Mman79]

@Ambient_88: Ars Technica is back up and, actually, I believe some of that may have to do with the amount of images and the layout of the site. I don't have the amount of lag/jerkiness you're experiencing, but there is an ever so slight difference between it and other sites I visit. Again it can also be the coding underneath. Verge though, dear Lord, lol. TMZ sucks too, but that's mostly because its just one cluttered clusterf**k of a website. Between the mass of social buttons, Flash videos and big quasi-ads for TooFab and others (and this is with good ad-blocking in place), it can be a pain to visit. Oh, and if the site has taken on a "Metro"-like design, chances are good it's going to go slow, in my experience. That's happened with PCWorld for me. That could be part of the Verge problem, though I think there is more to that particular website's issues. In my own opinion, I think websites have suddenly decided that "changing with the times" has required stuffing as much content on one page as possible, and design is either "Go Metro or go home". I'm seeing it everywhere now. Websites I've gone to for years are changing over to large, blocky tiles for article links and squishing them up against any remaining text and text links, along with the standard "ads" for other sites and ads in general. By the time you do that and sprinkle in a few "video articles" like the Verge does, you're left with a hell of an ugly view and perhaps that's why I see some rendering problems at times even in Chrome.

[Osaban]

-{ Quote: "Have you disabled Google Update in Plug-ins?
I see that you have found a solution via thread compositing (whatever that means), but I'm still curious about the updating.
All Chrome updates have been remarkably stable for me, since the exasperating "Aw, Snap!" fiasco I was experiencing about a year or so ago." }-
It is definitely working properly with the above fix. "Chrome://flags" opens up an amazing array of variables that are not available with normal settings. Google cautions users not to play with these without expert guidance, as they can lead to unexpected and often negative behaviour of the browser.

I also would like to emphasize that the problem seems to affect systems running Vista. It's good to know how to disable the automatic update, thanks.

[Page42]

@ Osaban,
I am real glad to hear you are back on track now after this recent Chrome update problem. It's a drag when an update messes with your system.

[Osaban]

-{ Quote: "@ Osaban,
I am real glad to hear you are back on track now after this recent Chrome update problem. It's a drag when an update messes with your system." }-
Thank you for your concern. It is actually odd when I think what makes us choose a particular browser rather than another. I was using IE9 for a couple of days and kept thinking it is really good, almost as fast as Chrome, secure and everything except it didn't feel right for some reasons. I suppose that we are all creatures of habit after all.

[Page42]

The Stable channel has been updated to 24.0.1312.56 for Windows, Mac, Linux, and Chrome Frame platforms.

[Page42]

The Stable channel has been updated to 24.0.1312.57 for Windows, Mac, Linux, and Chrome Frame.

[Page42]

The Chrome team is excited to announce the promotion of Chrome 25 to the Stable Channel. Chrome 25.0.1364.97 for Windows and Linux, and 25.0.1364.99 for Mac contain a number of new items including:
Improvements in managing and securing your extensions
Better support for HTML5 time/date inputs
JavaScript Web Speech API support
Better WebGL error handling
And lots of other features for developers

[new2security]

-{ Quote: "The Chrome team is excited to announce the promotion of Chrome 25 to the Stable Channel. Chrome 25.0.1364.97 for Windows and Linux, and 25.0.1364.99 for Mac contain a number of new items including:
Improvements in managing and securing your extensions
Better support for HTML5 time/date inputs
JavaScript Web Speech API support
Better WebGL error handling
And lots of other features for developers" }-

Great. Finally flash-plugin (PPAPI) works again. :-)
It seems they've either migrated the flash feature from /User/Appdata/Local/Google[..] folder to /Program Files/Google [..] folder, or their enterprise Chrome uses the appdata folder, and old files are not removed when the "regular" Chrome is installed. I can't remember which because I recently switched to Chrome non-enterprise version.

Slightly OT : Does anyone know if I can copy /backup my Chrome profile folder and restore it if necessary? I know Firefox's profile folder's content can get messed up and it would be handy if one could just delete the Chrome profile (the google / chrome folder) and simply replace it with a good copy.

[Page42]

-{ Quote: "Slightly OT : Does anyone know if I can copy /backup my Chrome profile folder and restore it if necessary? I know Firefox's profile folder's content can get messed up and it would be handy if one could just delete the Chrome profile (the google / chrome folder) and simply replace it with a good copy." }-
-{ Quote: "The easiest solution to backup everything related to your Chrome profile is to just copy and save your default user data directory. The directory location depends upon your operating system. The locations of default directory can be found here (http://dev.chromium.org/user-experience/user-data-directory). I backed up the user directory and performed a complete erase of Chrome. After reinstalling, I just over wrote the new user data directory and got back my bookmarks, history, extensions, passwords, theme, and visited links." }-
Excerpted from: How to Backup Bookmarks,Extensions,History,Passwords of Chrome Profile (http://www.crispytech.com/2010/01/15/backup-bookmarks-extensions-history-passwords-chrome-profile/)

Personal Notes: Because of concerns about possible corruption within the User data folder itself, I usually just back up the bookmarks file. ;)

I usually create the desired backup, then uninstall Chrome.
I run a cleaner program like CCleaner, then manually check for and remove leftovers.
Install a fresh copy of Chrome.
I run it once and close it again.
Then you can copy the backup of your old User Data folder over the existing one in your new installation.
Start Chrome again and you should be running like before.

Edit in: I left out a couple steps. :)

[JohnBurns]

-{ Quote: "Does anyone know if I can copy /backup my Chrome profile folder and restore it if necessary? I know Firefox's profile folder's content can get messed up and it would be handy if one could just delete the Chrome profile (the google / chrome folder) and simply replace it with a good copy." }-

Not sure if this is what you are looking for, but I use Google Chrome Backup - easy to use and works well. You might try it.


http://www.parhelia-tools.com/products/gcb/googlechrome.aspx

[new2security]

-{ Quote: "Excerpted from: How to Backup Bookmarks,Extensions,History,Passwords of Chrome Profile (http://www.crispytech.com/2010/01/15/backup-bookmarks-extensions-history-passwords-chrome-profile/)

Personal Notes: Because of concerns about possible corruption within the User data folder itself, I usually just back up the bookmarks file. ;)

I usually create the desired backup, then uninstall Chrome.
I run it once and close it again.
Then you can copy the backup of your old User Data folder over the existing one in your new installation.
Start Chrome again and you should be running like before." }-

Thanks for the info! Tried it and it works flawlessly. All old personal settings are replaced without any errors that I know of, including flags, plugin settings etc.

[new2security]

-{ Quote: "Not sure if this is what you are looking for, but I use Google Chrome Backup - easy to use and works well. You might try it.


http://www.parhelia-tools.com/products/gcb/googlechrome.aspx" }-

Thanks for the link, will keep it in mind.

[Bodhitree]

-{ Quote: "The Chrome team is excited to announce the promotion of Chrome 25 to the Stable Channel. Chrome 25.0.1364.97 for Windows and Linux, and 25.0.1364.99 for Mac contain a number of new items including:
Improvements in managing and securing your extensions
Better support for HTML5 time/date inputs
JavaScript Web Speech API support
Better WebGL error handling
And lots of other features for developers" }-

I'm on 28.0 I think.. Very fast, much faster than 25 stable. Chromium builds are exceptionally well tested, and speedy, and you get faster security fixes.

http://download-chromium.appspot.com/

[tlu]

-{ Quote: "I'm on 28.0 I think.. Very fast, much faster than 25 stable. Chromium builds are exceptionally well tested, and speedy, and you get faster security fixes.

http://download-chromium.appspot.com/" }-

Version 28? Is that the Canary version available on http://www.chromium.org/getting-involved/dev-channel? How does that site you mentioned differ?

[Page42]

The Stable channel has been updated to 25.0.1364.152 for Windows and Linux. Note: these release notes also apply to the same version for Mac that was released last Friday. This release contains security and stability improvements along with a number of bug fixes.

Security fixes and rewards:

Please see the Chromium security page (https://sites.google.com/a/chromium.org/dev/Home/chromium-security) for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
[$1000] [176882] High CVE-2013-0902: Use-after-free in frame loader. Credit to Chamal de Silva.
[$1000] [176252] High CVE-2013-0903: Use-after-free in browser navigation handling. Credit to “chromium.khalil”.
[$2000] [172926] [172331] High CVE-2013-0904: Memory corruption in Web Audio. Credit to Atte Kettunen of OUSPG.
[$1000] [168982] High CVE-2013-0905: Use-after-free with SVG animations. Credit to Atte Kettunen of OUSPG.
[174895] High CVE-2013-0906: Memory corruption in Indexed DB. Credit to Google Chrome Security Team (Jüri Aedla).
[174150] Medium CVE-2013-0907: Race condition in media thread handling. Credit to Andrew Scherkus of the Chromium development community.
[174059] Medium CVE-2013-0908: Incorrect handling of bindings for extension processes.
[173906] Low CVE-2013-0909: Referer leakage with XSS Auditor. Credit to Egor Homakov.
[172573] Medium CVE-2013-0910: Mediate renderer -> browser plug-in loads more strictly. Credit to Google Chrome Security Team (Chris Evans).
[172264] High CVE-2013-0911: Possible path traversal in database handling. Credit to Google Chrome Security Team (Jüri Aedla).

Full details about what changes are in this build are available in the SVN revision log (http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/branches/1364/src&range=183676:185281&mode=html).

[Hungry Man]

Getting as many in as they can before pwn2own.

[Page42]

Over half a million in potential prize money.
When is it scheduled for?

[Page42]

The Stable channel has been updated to 25.0.1364.160.
Probably a patch for the sandbox bypass exploit. :thumb:

[ght1]

Is it possible to tweak the font rendering? :-\ Compared to Firefox the Chrome fonts are thinner and brighter. :-\

Thank you for all suggestions.

[m00nbl00d]

-{ Quote: "The Stable channel has been updated to 25.0.1364.160.
Probably a patch for the sandbox bypass exploit. :thumb:" }-

Surprisingly, Google still does not provide an updated version for their Google Chrome Enterprise installer. :o :argh:

I rechecked seconds ago.

-edit-

On the other hand, Google Chrome Frame (Enterprise installer) is up-to-date. I forgot to check it yesterday. Funny. lol

[Page42]

The Stable channel has been updated to 25.0.1364.172.
More than likely it includes the Flash Player update.

[Mman79]

I'm hoping it fixes a lot of page loading stalls, the infamous back button behavior..which has been happening without ABP installed and a lot of terrible slowing in general. Something was way off with the previous version

[Page42]

Some probs will arrive, some will disappear. ;)

[Mman79]

-{ Quote: "Some probs will arrive, some will disappear. ;)" }-

That's the Chrome way, always has been ;D I was able to replicate these issues on several users' machines that weren't even in the same locations, so I didn't feel alone this time, lol.

[ght1]

-{ Quote: "Is it possible to tweak the font rendering? :-\ Compared to Firefox the Chrome fonts are thinner and brighter. :-\

Thank you for all suggestions." }-

Where are the Chrome freaks? :-\

[Page42]

-{ Quote: "Where are the Chrome freaks? :-\" }-
Well, after all, this is a stable channel update thread.
Perhaps the question deserves and is better suited for its own thread.

[Page42]

-{ Quote: "More than likely it includes the Flash Player update." }-
This release (25.0.1364.172) contains stability improvements, and a new version of Adobe Flash. Full details about what changes are in this build are available in the SVN revision log (http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=/branches/1364/src&range=186726:187217&mode=html).

[m00nbl00d]

-{ Quote: "Is it possible to tweak the font rendering? :-\ Compared to Firefox the Chrome fonts are thinner and brighter. :-\

Thank you for all suggestions." }-

Have you tried searching (using your favourite search engine) for google chrome font rendering and see if you get some useful tips from others? It may be worth trying. :)

[Page42]

The Chrome team is excited to announce the promotion of Chrome 26 to the Stable Channel. Chrome 26.0.1410.43 for Windows, Mac, Linux, and Chrome Frame contains number of new items including:

"Ask Google for suggestions" spell checking feature improvements (e.g. grammar and homonym checking)

Desktop shortcuts for multiple users (profiles) on Windows

Asynchronous DNS resolver on Mac and Linux

Security fixes and rewards:

Please see the Chromium security page for more information. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.
[$1000] [172342] High CVE-2013-0916: Use-after-free in Web Audio. Credit to Atte Kettunen of OUSPG.
[180909] Low CVE-2013-0917: Out-of-bounds read in URL loader. Credit to Google Chrome Security Team (Cris Neckar).
[180555] Low CVE-2013-0918: Do not navigate dev tools upon drag and drop. Credit to Vsevolod Vlasov of the Chromium development community.
[Linux only] [178760] Medium CVE-2013-0919: Use-after-free with pop-up windows in extensions. Credit to Google Chrome Security Team (Mustafa Emre Acer).
[177410] Medium CVE-2013-0920: Use-after-free in extension bookmarks API. Credit to Google Chrome Security Team (Mustafa Emre Acer).
[174943] High CVE-2013-0921: Ensure isolated web sites run in their own processes.
[174129] Low CVE-2013-0922: Avoid HTTP basic auth brute force attempts. Credit to “t3553r”.
[169981] [169972] [169765] Medium CVE-2013-0923: Memory safety issues in the USB Apps API. Credit to Google Chrome Security Team (Mustafa Emre Acer).
[169632] Low CVE-2013-0924: Check an extension’s permissions API usage again file permissions. Credit to Benjamin Kalman of the Chromium development community.
[168442] Low CVE-2013-0925: Avoid leaking URLs to extensions without the tabs permissions. Credit to Michael Vrable of Google.
[112325] Medium CVE-2013-0926: Avoid pasting active tags in certain situations. Credit to Subho Halder, Aditya Gupta, and Dev Kar of xys3c (xysec.com).

A full list of changes in this build is available in the SVN revision log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Dharani Govindan
Google Chrome (http://googlechromereleases.blogspot.com/)

[SirDrexl]

I'm seeing a little key icon in fields where I would enter a password. Did Chrome add this at some point, or is ChromeIPass doing it?

[Trespasser]

Flash Player has been updated to 11.7.700.169 so we Chrome users should be getting an update very soon.

http://www.adobe.com/products/flashplayer/distribution3.html

Later...

[Daveski17]

Oh great, another flash update. :wacko:

[Page42]

The Stable channel has been updated to 26.0.1410.63 for Mac and Linux; 26.0.1410.64 for Windows and Chrome Frame. This release contains stability improvements, and a new version of Adobe Flash.

[c2d]

-{ Quote: "The Stable channel has been updated to 26.0.1410.63 for Mac and Linux; 26.0.1410.64 for Windows and Chrome Frame. This release contains stability improvements, and a new version of Adobe Flash." }-

Got it...thanks

[SirDrexl]

Is anybody having a problem with Flash not loading? This just started today, and from looking at their forum, others have had it (also starting today). A common "fix" is to disable the internal pepper Flash and keep the one from Adobe, or just either one of them. But, I don't install Flash separately so I only have the bundled plugin. I hope this gets sorted out before I have to use Adobe's installer.

Edit: there was a new version of Flash released today (11.7.700.202), so I guess that's the problem. I didn't realize it would update Flash without updating the Chrome version. It's still 26.0.1410.64.

[Windows_Security]

What I discovered on my setup to overcome flash not playing

PPAPI flash is updated in user data folder. So you end up with the old flashplayer in Chrome program directory and the new one in user directory.

What I do: move newest 'ppapi flash dll' from user folder to programs folder, start chrome with this switch --ppapi-flash-path, see example http://www.wilderssecurity.com/showpost.php?p=2229023&postcount=3

I have a SRP deny, so dll is blocked by Windows OS when in user folder

[7anon]

-{ Quote: "Edit: there was a new version of Flash released today (11.7.700.202), so I guess that's the problem. I didn't realize it would update Flash without updating the Chrome version. It's still 26.0.1410.64." }-
=
-{ Quote: "Flash Player Update
Tuesday, May 14, 2013

We are currently updating Flash Player to 11.7.700.202 for Windows and Mac to all Stable channel (Chrome 26) users.

If you find a new issue, please let us know by filing a bug.

http://googlechromereleases.blogspot.gr/2013/05/flash-player-update.html" }-
.

[Trespasser]

It seems chrome is back to putting PepperFlash in user space again...even on the Enterprise version. If you delete it from user space chrome will shortly copy it back there. If running SRP you'll need to create an unrestricted rule for it in Additional Rules or PepperFlash will not be able to load.

Later...

[Windows_Security]

Thx, back to Chromium with --ppapi-flash-path="[PATH]\pepflashplayer.dll" :thumbd: and the hassle with downloading updated Chrome portable, getting pepflashplayer and pdf dll out of it and moving it to Chromium folder :doubt:

[m00nbl00d]

-{ Quote: "Thx, back to Chromium with --ppapi-flash-path="[PATH]\pepflashplayer.dll" :thumbd: and the hassle with downloading updated Chrome portable, getting pepflashplayer and pdf dll out of it and moving it to Chromium folder :doubt:" }-

Well, why don't you automate that process? :D Sounds like a fun project. ;D

[SirDrexl]

Wow, it looks like I may have to set the folder to unrestricted. ::) I tried the path thing, and it doesn't work unless I delete the files from the folder in Users. That works for a few minutes until Chrome puts them back. Sheesh.

[Trespasser]

-{ Quote: "Wow, it looks like I may have to set the folder to unrestricted. ::) I tried the path thing, and it doesn't work unless I delete the files from the folder in Users. That works for a few minutes until Chrome puts them back. Sheesh." }-

I'm on Win 8 Pro 64 bit. Here's my Additional Rules entry for PepperFlash...

C:\Users\user-name-here\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.202\pepflashplayer.dll

This works fine. You could use...

C:\Users\user-name-here\AppData\Local\Google\Chrome\User Data\PepperFlash

with unrestricted rights, I suppose.

Later...

[SirDrexl]

Oh, by "path thing" I actually meant the shortcut with the specified path for Flash. But thanks anyway.

[new2security]

What a mess. But I suppose the next Chrome release will also contain the most updated pepperflash.

[new2security]

I just copied the pepflashplayer.dll + manifest.json from my User folder to Program Files \ Goog..\Chr..\Appl..\Pepperflash folder and flash works. I didn't need to use the special path instruction that was recommended.

-edit : darn. Chrome downloads this file again to my user folder and I have to manually delete it. The path solution doesn't work neither does allowing the pepflashplayer.dll in my SRP settings.