谷歌浏览器Google Chrome正式版迎来v95首个版本发布,详细版本号为v95.0.4638.54,上一个正式版v94.0.4606.81发布于10月8日,时隔12天Google又发布了新版Chrome浏览器,本次升级主要是更新了安全修复和稳定性改进及用户体验。

The official version of Google Chrome ushered in the first version of v95. The detailed version number is v95.0.4638.54. The last official version v94.0.4606.81 was released on October 8, and Google released a new version after 12 days. Chrome browser, this upgrade is mainly to update security fixes, stability improvements and user experience.

New version changes

Chrome v95.0.4638.54 official version (2021-10-20)

The main update of the official version of Google Chrome v95, Chrome 95 began to enforce the cookie size limit, and canceled the support for the FTP file transfer protocol, the cookie name + value size is strictly limited to a maximum of 4096 bytes, and the length of each attribute is the maximum It is 1024 bytes, and the over-length part will be completely rejected. Chrome 95 enhanced the user agent (UA) client prompt to cater to the detection of different Windows versions. Chrome 95 also cancelled support for the FTP file transfer protocol. Careful users should find that Chrome no longer supports encrypted FTP connections such as FTPS, and lacks corresponding proxy support.

The main update of the official version of Google Chrome v94 introduces support for the idle detection API, which will be enabled by default and available to developers. It also brings support for the low-level WebCodecs API and provides access to existing hardware and software media encoders and decoders, which will improve the performance of certain applications, such as latency-sensitive game streaming. An obsolete standard AppCache has also been deleted. Google said this is a security responsibility, so developers should use Service Workers instead.

The main update of the official version of Google Chrome v93 brings a series of improvements to consumers, cross-platform support for WebOTP API, Note adds a new note URL, and removes the 3DES of TLS. For multi-screen window settings, a new screen information API has been added, and the existing window placement API has been incrementally improved to enable web applications to provide an excellent multi-screen experience. The existing single window.screen provides a limited view of the available screen space, and the window placement function is generally bounded by the current screen. This feature opens up a modern multi-screen workspace for web applications.

新版变化

Chrome v95.0.4638.54 正式版(2021-10-20)

谷歌浏览器v95正式版主要更新,Chrome 95开始强制执行的cookie大小限制、以及取消对FTP文件传输协议的支持,cookie的名称+值的大小严格限制为最大4096字节,每个属性的长度最多为1024字节,超长部分将被彻底拒绝。Chrome 95增强了用户代理(UA)的客户端提示,以迎合不同Windows版本的检测。Chrome 95还取消了对FTP文件传输协议的支持。细心的用户应该发现,Chrome已不支持FTPS等加密型FTP连接,也缺乏相应的代理支持。

谷歌浏览器v94正式版主要更新,引入了对空闲检测API的支持,这个API将默认启用并提供给开发者使用。还带来对低级别的WebCodecs API的支持,提供对现有硬件和软件媒体编码器和解码器的访问,这将提高某些应用程序的性能,如对延迟敏感的游戏流。还删除了一个废弃的标准AppCache,Google表示这是一个安全责任,所以开发者应该使用Service Workers来代替。

谷歌浏览器v93正式版主要更新,面向消费者带来了一系列的改进,跨平台支持WebOTP API,Note新增新的笔记URL,移除TLS的3DES。多屏幕窗口设置,增加了新的屏幕信息API,并对现有的窗口放置API进行了增量改进,使网络应用能够提供优秀的多屏幕体验。现有的单一的window.screen提供了一个有限的可用屏幕空间的视图,而窗口放置功能一般都是以当前屏幕为界限的。这项功能为网络应用开启了现代多屏工作空间。

安全修复和奖励

googlechromereleases.blogspot.com

Chrome v95.0.4638.54,此更新包括19个安全修复程序。

[$20000][1246631] High CVE-2021-37981 : Heap buffer overflow in Skia. Reported by Yangkang (@dnpushme) of 360 ATA on 2021-09-04
[$10000][1248661] High CVE-2021-37982 : Use after free in Incognito. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi’anxin Group on 2021-09-11
[$10000][1249810] High CVE-2021-37983 : Use after free in Dev Tools. Reported by Zhihua Yao of KunLun Lab on 2021-09-15
[$7500][1253399] High CVE-2021-37984 : Heap buffer overflow in PDFium. Reported by Antti Levomäki, Joonas Pihlaja and Christian Jalio from Forcepoint on 2021-09-27
[$5000][1241860] High CVE-2021-37985 : Use after free in V8. Reported by Yangkang (@dnpushme) of 360 ATA on 2021-08-20
[$6000][1242404] Medium CVE-2021-37986 : Heap buffer overflow in Settings. Reported by raven (@raid_akame) on 2021-08-23
[$5000][1206928] Medium CVE-2021-37987 : Use after free in Network APIs. Reported by Yangkang (@dnpushme) of 360 ATA on 2021-05-08
[$5000][1228248] Medium CVE-2021-37988 : Use after free in Profiles. Reported by raven (@raid_akame) on 2021-07-12
[$2000][1233067] Medium CVE-2021-37989 : Inappropriate implementation in Blink. Reported by Matt Dyas, Ankur Sundara on 2021-07-26
[$N/A][1247395] Medium CVE-2021-37990 : Inappropriate implementation in WebView. Reported by Kareem Selim of CyShield on 2021-09-07
[$TBD][1250660] Medium CVE-2021-37991 : Race in V8. Reported by Samuel Groß of Google Project Zero on 2021-09-17
[$TBD][1253746] Medium CVE-2021-37992 : Out of bounds read in WebAudio. Reported by sunburst@Ant Security Light-Year Lab on 2021-09-28
[$TBD][1255332] Medium CVE-2021-37993 : Use after free in PDF Accessibility. Reported by Cassidy Kim of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2021-10-02
[$TBD][1243020] Medium CVE-2021-37996 : Insufficient validation of untrusted input in Downloads. Reported by Anonymous on 2021-08-24
[$3000][1100761] Low CVE-2021-37994 : Inappropriate implementation in iFrame Sandbox. Reported by David Erceg on 2020-06-30
[$1000][1242315] Low CVE-2021-37995 : Inappropriate implementation in WebApp Installer. Reported by Terence Eden on 2021-08-23
[1261511] Various fixes from internal audits, fuzzing and other initiatives

下载地址

离线安装包“无更新组件”版提取原生绿色版方法:
鼠标右键解压离线安装包,此时会解压出来一个chrome.7z
再对chrome.7z解压就是原生绿色版啦!
离线安装包“无更新组件”版不含在线更新升级功能,所以不会添加更新计划任务,也没有后台更新进程,更干净。

Google Chrome v95.0.4638.54 官方正式版 离线安装包(无更新组件)64位
https://dl.google.com/release2/chrome/id4ma77on5veckrgwsrfbhgwda_95.0.4638.54/95.0.4638.54_chrome_installer.exe
https://www.google.com/dl/release2/chrome/id4ma77on5veckrgwsrfbhgwda_95.0.4638.54/95.0.4638.54_chrome_installer.exe
https://redirector.gvt1.com/edgedl/release2/chrome/id4ma77on5veckrgwsrfbhgwda_95.0.4638.54/95.0.4638.54_chrome_installer.exe

Google Chrome v95.0.4638.54 官方正式版 离线安装包(无更新组件)32位
https://dl.google.com/release2/chrome/cz6f6jwwxjzpszomeh6wjcm7my_95.0.4638.54/95.0.4638.54_chrome_installer.exe
https://www.google.com/dl/release2/chrome/cz6f6jwwxjzpszomeh6wjcm7my_95.0.4638.54/95.0.4638.54_chrome_installer.exe
https://redirector.gvt1.com/edgedl/release2/chrome/cz6f6jwwxjzpszomeh6wjcm7my_95.0.4638.54/95.0.4638.54_chrome_installer.exe

Google Chrome v95.0.4638.54 官方正式版 离线安装包(含更新组件)64位
https://dl.google.com/edgedl/chrome/install/GoogleChromeStandaloneEnterprise64.msi

Google Chrome v95.0.4638.54 官方正式版 离线安装包(含更新组件)32位
https://dl.google.com/edgedl/chrome/install/GoogleChromeStandaloneEnterprise.msi

Google Chrome 官方正式版 离线安装包(含更新组件)新版及历史版本
https://lanzoui.com/b138066
https://pan.baidu.com/s/1Q5FptUnS0BjGMk5erwOhyw 提取码:36oz

发表评论

后才能评论