Pale Moon Version 25.7.1 Released with Security Updates

Pale Moon has been updated to version 25.7.1.  This update includes critical security updates as well stability and web-compatibility update.

Security updates have also been made in the Android version of Pale Moon in order to keep users of the otherwise currently unmaintained OS updated regarding known security vulnerabilities.

Included in the security updates is an update described as "DiD", "Defense-in-Depth.  This fix does not apply to an actively exploitable vulnerability in Pale Moon.  Rather, it is a preventative measure to prevent future vulnerabilities caused by the same code when surrounding code changes.

Security fixes:

• Changed the jemalloc poison address to something that is not a NOP-slide. DiD
• Fixed a memory safety hazard in ConvertDialogOptions (CVE-2015-4521)
• Fixed a buffer overflow/crash hazard in the VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE (CVE-2015-7179)
• Fixed an overflow/crash hazard in the XULContentSinkImpl::AddText function (CVE-2015-7175)
• Fixed a stack buffer overread hazard in the ICC v4 profile parser (CVE-2015-4504)
• Fixed an HTMLVideoElement Use-After-Free Remote Code Execution 0-day vulnerability (ZDI-CAN-3176) (CVE-2015-4509)
• Fixed a potentially exploitable crash in nsXBLService::GetBinding
• Fixed a memory safety hazard in nsAttrAndChildArray::GrowBy (CVE-2015-7174)
• Fixed a memory safety hazard for callers of nsUnicodeToUTF8::GetMaxLength (CVE-2015-4522)
• Fixed a heap buffer overflow/crash hazard caused by invalid WebM headers (CVE-2015-4511)

Fixes/changes:

A complete list of the fixes, changes and additions is available in the Release Notes.  Of note is additional code cleanup:

• Removed the majority of remaining telemetry code (including the data reporting back-end and health report) to prevent a few issues with partially removed code in earlier versions.

Minimum system Requirements (Windows):

• Windows Vista/Windows 7/Windows 8/Server 2008 or later
• A processor with SSE2 support
  
• 256 MB of free RAM (512 MB or more recommended)
  
• At least 150 MB of free (uncompressed) disk space

Pale Moon includes both 32- and 64-bit versions for Windows:

• 32x:  Download the Pale Moon browser
• 64x:  Pale Moon - x64 builds

Other versions:

• PM4XP (Pale Moon for XP) has reached end of support and has been replaced with Pale Moon for Atom. 
• Pale Moon for Android™
  
• Linux version: Available from http://www.palemoon.org/contributed-builds.shtml

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...