Google has released Chrome 10.0.648.127 for Windows, Mac and Linux. The jump from 9 to 10 brings new features but also some important security fixes and improvements. This first stable version of Chrome 10 fixes 23 security related problems that were present in the latest stable version of Chrome 9. Under the Chromium Security Rewards program, 20 of the 23 vulnerabilities were eligible for cash payments from Google. The highest payment of $1500 was to Sergey Glazunov for finding a problem relating to a stale pointer within the SVG cursors code.
The details of these fixes aren’t yet available to the public as Google restricts the access to the fix details until “the majority of Chrome users have updated to the latest patched version.”
As well as the security related fixes, Chrome 10 adds new features to Chrome including:
- New settings pages that open in a tab, rather than a dialog box
- Improved security with malware reporting and disabling outdated plugins by default
- Sandboxed Adobe Flash on Windows
- Password sync as part of Chrome Sync now enabled by default
- GPU Accelerated Video
- Background WebApps
- webNavigation extension API (experimental but ready for testing)
From a security point of view one of the most instresting features is the extension of Chrome’s sandbox to include the integrated version of Flash. Users of Windows Vista or Windows 7 now benefit from an additional layer of protection against malicious webpages.
Google have made this video to explain how it works: