Google Chrome 18 full changelog

* [$500] [109574] Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa.
* [$500] [112317] Medium CVE-2011-3059: Out-of-bounds read in SVG text handling. Credit to Arthur Gerkis.
* [$500] [114056] Medium CVE-2011-3060: Out-of-bounds read in text fragment handling. Credit to miaubiz.
* [116398] Medium CVE-2011-3061: SPDY proxy certificate checking error. Credit to Leonidas Kontothanassis of Google.
* [116524] High CVE-2011-3062: Off-by-one in OpenType Sanitizer. Credit to Mateusz Jurczyk of the Google Security Team.
* [117417] Low CVE-2011-3063: Validate navigation requests from the renderer more carefully. Credit to kuzzcc, Sergey Glazunov, PinkiePie and scarybeasts (Google Chrome Security Team).
* [$1000] [117471] High CVE-2011-3064: Use-after-free in SVG clipping. Credit to Atte Kettunen of OUSPG.
* [$1000] [117588] High CVE-2011-3065: Memory corruption in Skia. Credit to Omair.

* Fixed NTP signed in state is missing (Issue: 112676)
* Fixed gmail seems to redraw itself (all white) occasionally (Issue: 111263)
* Focus quot;OKquot; button on Javascript dialogs (Issue: 111015)
* Fixed Back button frequently hangs (Issue: 93427)
* Increase the buffer size to fix muted playback rate (Issue: 108239)
* Fixed Empty span with line-height renders with non-zero height (Issue: 109811)