Google Releases Google Chrome 28.0.1500.95 Stable for all platforms

Google has released Google Chrome 28.0.1500.95 Stable for Windows, Mac and Chrome Frame platforms to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to execute arbitrary code, bypass intended restrictions, obtain sensitive information or cause a denial-of-service condition.

Overview
Google Chrome 28 features a rich notifications center that send immediate alerts to users about important events as they happen. It can enable users to act directly on these notifications and show rich content like lists and images.

Google Chrome 28 introduces Blink a new threaded HTML parser that loads DOM content about 10% faster when compared to the normal HTML parser.

Google Chrome 28 contains a number of new improvements and updates, including:

Faster page loads
Starting in Chrome 28, your apps get a free speed boost from Blink’s new threaded HTML parser. It has two under-the-hood performance benefits:
  1. Reduced jankiness by moving work off the main JavaScript thread
  2. Improved page loading speed through pipelining.

Compared to the normal HTML parser, it loads DOM content about 10% faster and reduces the maximum stop time due to parsing by 40%.

Deprecated features
The prefixed version of the Content Security Policy HTTP header is now deprecated, so please use Content-Security-Policy instead of X-WebKit-CSP. The prefixed version will still work for now, but future releases may not support it.

Other developer features in this release
  • You can now use CSS @supports conditional blocks to test whether Chromium supports certain property:value pairs.
  • The :unresolved CSS pseudoclass lets you style a Custom Element that hasn’t been registered in the browser yet. Custom Elements are part of Web Components.
  • As part of V8's continuing quest to make all JavaScript as fast as possible, recent optimizations have made the asm.js benchmarks more than twice as fast as prior versions of Chrome.
  • Chrome Apps and Extensions developers can now use rich notifications to proactively engage with users.

See the following Google website for more details: Chrome 28 Beta: A more immersive web, everywhere

Download Google Chrome Stable
The link in this section correspond to files available for this download.

Note:
If you’ve already installed the Chrome 28 Stable, it will automatically update.

Google Chrome 28.0.1500.95

What's new in Google Chrome 28.0.1500.95
This update includes 11 security fixes. Here are highlight some fixes:

Security fixes:
  • [$500] [257748] CVE-2013-2881: Origin bypass in frame handling. Credit to Karthik Bhargavan. (Medium)
  • [$1000] [260106] CVE-2013-2882: Type confusion in V8. Credit to Cloudfuzzer. (High)
  • [$1000] [260165] CVE-2013-2883: Use-after-free in MutationObserver. Credit to Cloudfuzzer. (High)
  • [248950] CVE-2013-2884: Use-after-free in DOM. Credit to Ivan Fratric of Google Security Team. (High)
  • [249640] [257353] CVE-2013-2885: Use-after-free in input handling. Credit to Ivan Fratric of Google Security Team. (High)

Additional fixes:
  • [261701] CVE-2013-2886: Various fixes from internal audits, fuzzing and other initiatives. (High)

Reference:
Google Chrome Stable Update
at
Labels:

No comments:

Post a Comment