The security updates include DiD ("Defense-in-Depth") fixes. This means that it is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.
Details from the Release Notes:
Changes/fixes:
- Changed the default Windows 10 styling when no accent color is aplied to black-on-white.
- Changed the theme styling on Windows 10 when the system window frame is used (menu bar enabled) to use the window manager background directly, preventing visual lag updating the window color when it changes.
- Updated user agent overrides for DropBox, YouTube and Yahoo to work around user agent sniffing issues.
- Fixed a crash in the media subsystem.
- Fixed a regression where video playback hardware acceleration was disabled incorrectly on some systems.
- Updated libhyphen to the latest upstream code to fix a security issue.
- Updated NSPR to 4.16-RTM with a patch to un-bust building on win64.
- Updated NSS to 3.32.1-RTM.
- Worked around some more issues with Mac fonts (CVE-2017-7825).
- Fixed a potential rooting hazard in NPAPI plugin code. DiD
- Fixed a potential reference issue in JavaScript arrays. DiD
- Windows Vista/Windows 7/8/10/Server 2008 or later
- Windows Platform Update (Vista/7) strongly recommended
- A processor with SSE2 instruction support
- 256 MB of free RAM (512 MB or more recommended)
- At least 150 MB of free (uncompressed) disk space
Update
To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window. Select About Pale Moon > Check for Updates.
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
No comments:
Post a Comment