Download Google Chrome 39.0.2171.65

Google has released version 39 of its Chrome web browser. Google Chrome is available for Windows, Linux, and OS X. There are also versions for Android and iOS, but they follow a slightly different release schedule. New in version 39 is that a 64-bit version of the browser is now also available for OS X. The release notes mention several new apps and extension APIs, and changes that should improve stability and performance. Furthermore, a large number of mainly minor but also a few serious security problems have been fixed.

Stable Channel Update
The Chrome team is delighted to announce the promotion of Chrome 39 to the stable channel for Windows, Mac and Linux. Chrome 39.0.2171.65 contains a number of fixes and improvements, including:

• 64-bit support for Mac
• A number of new apps/extension APIs
• Lots of under the hood changes for stability and performance

A partial list of changes is available in the log.

Security Fixes and Rewards
This update includes 42 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

• [389734] high CVE-2014-7899: Address bar spoofing.
• [406868] high CVE-2014-7900: Use after free in pdfium.
• [413375] high CVE-2014-7901: Integer overflow in pdfium.
• [414504] high CVE-2014-7902: Use after free in pdfium.
• [414525] high CVE-2014-7903: Buffer overflow in pdfium.
• [418161] high CVE-2014-7904: Buffer overflow in Skia.
• [421817] high CVE-2014-7905: Flaw allowing navigation to intents that do not have the BROWSABLE category.
• [423030] high CVE-2014-7906: Use after free in pepper plugins.
• [423703] high CVE-2014-0574: Double-free in Flash.
• [424453] high CVE-2014-7907: Use after free in blink. NSFOCUS Security Team.
• [425980] high CVE-2014-7908: Integer overflow in media.
• [391001] Medium CVE-2014-7909: Uninitialized memory read in Skia.

As usual, our ongoing internal security work was responsible for a wide range of fixes:

• [433500] CVE-2014-7910: Various fixes from internal audits, fuzzing and other initiatives.