Download Google Chrome 17.0.963.83

Google has released an update to version 17 of its Chrome web browser. Google Chrome is available in three different versions: stable, beta and dev. Development versions are at an early stage of development and are therefore the least stable. In version 17, the omnibox has been improved, among other things. While you are still typing in the search term fetches Google the page it thinks you want to see. In addition, downloads are now also held up to the light in order to better serve the user to protect. This update includes several improvements related to Flash games and issues identified in the Pwn2Own contest.

Stable Channel Update

The Chrome Stable channel has been updated to 17.0.963.83 on Windows, Mac, Linux and Chrome Frame. This release fixes issues with Flash games, along with the security fixes listed below.

Security fixes and rewards:

Please see the Chromium security page for more details. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Some of the items listed below represent the start of hardening measures based on study of the exploits submitted to the Pwnium competition.

• [113902] High CVE-2011-3050: Use-after-free with first-letter handling.
• [116162] High CVE-2011-3045: libpng integer issue from upstream.
• [116461] High CVE-2011-3051: Use-after-free in CSS cross-fade handling.
• [116637] High CVE-2011-3052: Memory corruption in WebGL canvas handling.
• [116746] High CVE-2011-3053: Use after free in block splitting.
• [117418] Low CVE-2011-3054: Apply additional isolations to webui privileges.
• [117736] Low CVE-2011-3055: Prompt in the browser native UI for unpacked extension installation.
• [117550] High CVE-2011-3056: Cross-origin violation with “magic iframe”.
• [117794] Medium CVE-2011-3057: Invalid read in v8.

Also, this single low severity issue was fixed in a previous patch but we forgot to issue proper credit:

• low CVE-2011-3049: Extension web request API can interfere with system requests.

More detailed updates are available on the Chrome Blog. Full details about what changes are in this release are available in the SVN revision log. Interested in hopping on the stable channel? Find out how. If you find a new issue, please let us know by filing a bug.