Tuesday, February 27, 2024

Pale Moon Version 33.0.1 Released with Security Updates

  Pale MoonPale Moon has been updated to version 33.0.1.  This is a bugfix and security update.

Changes/fixes:

  • Removed site-specific override for Amazon.com due to breakage.
  • Fixed script timeout values that were inadvertently overridden in branding.
  • Fixed an issue where empty MIME type registrations would break some parts of the UI.
  • (Linux only) Pasting URLs to content now by default does not navigate to that URL.
  • If content-paste-navigation is enabled (via middlemouse.contentLoadURL), navigation is now restricted to pasting to active body type elements (to prevent unwanted navigation when pasting URLs to input boxes, for example).
  • Fixed a problem with JS modules preventing ExportEntries from working.
  • (Linux only) Fixed a build issue when building with a system-supplied cairo library (unsupported).
  • Fixed an issue where workers could lock up the browser with SetInterval with an out-of-bounds (too small) value. This is now clamped to 4ms matching the HTML spec.
  • Fixed a few usability issues with the built-in developer tools.
  • Fixed a potential crash in web workers.
  • Fixed a potential overflow issue in image maps.
  • Fixed a potential security issue with multi-part/mixed content (CVE-2024-1551).

Notes:

*DiD This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Rejected security patches: This means that patches were theoretically applicable to our code but considered undesirable, which could be due to unwanted changes in behavior, known regressions caused by the patches, or unnecessary risks for stability, security or privacy.

From this point forward, UXP Mozilla security patch summaries will no longer be listed as they are mostly irrelevant.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes
Release Cycle

Home
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

No comments: