Jump to content


Pale Moon Version 27.3 Released with Security Updates


  • Please log in to reply
1 reply to this topic

#1 OFFLINE   Corrine

Corrine

    The Mystical Rose

  • Forum Admins
  • 4,031 posts

Posted 28 April 2017 - 09:38 AM

Pale Moon has been updated to Version 27.3.  Note that Version 27.3 is a major development update with many changes in the media back-end.  As a result, it is important to realize that some aspects are still a work in progress and some html5 video playback issues with MSE (Media Source Encryption) may be encountered. Included in the updates are DiD* patches.

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

    *DiD stands for "Defense-in-Depth" and is a fix that does not apply to an actively exploitable vulnerability in Pale Moon but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.

Release Notes
Posted Image

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

#2 OFFLINE   Corrine

Corrine

    The Mystical Rose

  • Forum Admins
  • 4,031 posts

Posted 29 April 2017 - 08:50 AM

With the update to Pale Moon 27.3, the following security change was included:

Quote

Added an option to display punycode domain for IDN websites to combat phishing.
This is enabled by default for domain-validated https sites.
Preference: browser.identity.display_punycode
0 = Display IDN name in identity panel (previous behavior)
1 = Display punycode name for DV SSL domains (default)
2 = Also display punycode for HTTP sites if IDN name used

See IDN and Pale Moon: know your browser. for an explanation of the change.
Posted Image

Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users