Pale Moon Version 28.13.0 Released With Security Updates

Pale Moon has been updated to version 28.13.0. The update is a compatibility, bugfix and security update.  Linux versions will follow shortly.

Note: Included in the updates are DiD* patches.

*DiD stands for "Defense-in-Depth" and is a fix that does not apply to an actively exploitable vulnerability in Pale Moon but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.

From the Release Notes:

Changes/fixes:

• Updated the included site-specific user-agent overrides for a number of websites that need them.
• Rewritten the browser's padlock code to use more modern APIs and provide more accurate security status indication.
  Now also with localized tooltips!
  
• Fixed a missing close button on the undo prompt after removing a thumbnail from the QuickDial new tab page.
  
• Fixed an issue with the alternative stylesheet menu in the browser's UI not working.
• Implemented the use of intrinsic aspect ratios for images to improve layout during load and page positioning.
• Added a preference to the use of node.getRootNode and disabled by default. See implementation notes.
  
• Added CSS -webkit-appearance as an alias for -moz-appearance to improve compatibility with websites that only try to use Chrome-specific keywords to style standard form elements.
• Updated the SQLite library to 3.33.0.
• Reinstated precise floating point precision model in JavaScript for those alternate builders who foolishly try to use the inaccurate "fast" model.
• Improved spec compliance of modular JavaScript use (ECMAScript modules).
• Changed media errors to be a more generic response, and added a preference (media.sourceErrorDetails.enabled) to enable detailed error reporting of media errors for debugging purposes.
  Previously, detailed errors were provided by default which could lead to privacy issues.
• Improved code stability of the AbortController implementation.
• Fixed a race condition in the secure connection library (NSS).
• Security issues fixed: CVE-2020-15664, CVE-2020-15666, CVE-2020-15667, CVE-2020-15668 and CVE-2020-15669.
• Unified XUL Platform Mozilla Security Patch Summary: 4 fixed, 1 defense-in-depth, 1 rejected, 9 not applicable.

Implementation notes:

• In 28.11.0 we introduced node.getRootNode because some websites would fail with an error if this function was not present. Unfortunately, this caused problems with other sites that (incorrectly) assume Google WebComponents are available when this utility function is present (feature detection gone wrong). While it is considered by some to be part of the Google WebComponents implementation, it actually has utility value outside of that use. Because of the problems caused, we've added a preference and disabled it by default, fixing these kinds of websites.
  When needed, you can re-enable this function with dom.getRootNode.enabled
  This should improve web compatibility by default yet still allow users to enable this function for websites that use its utility but do not use WebComponents.

Pale Moon includes both 32- and 64-bit versions for Windows:

• 32x:  Pale Moon - x32 builds
• 64x:  Pale Moon - x64 builds

Update

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Microsoft Cumulative Update for Windows 10 Version 2004

Microsoft released a cumulative update with non-security improvements and fixes for Windows 10 Version 2004. 

The update addresses a long list of issues, of which the following are identified as highlights:

• Updates an issue that might prevent ActiveX content from loading.
• Updates an issue that might cause apps that use the custom text wrapping function to stop working in certain scenarios. 
• Updates an issue to reduce the likelihood of missing fonts. 
• Updates an issue that prevents users from reducing the size of a window in some cases. 
• Updates an issue that causes the touch keyboard to close when you touch any key. 
• Provides the ability for Dolby Atmos for Headphones and DTS Headphone: X to be used in 24-bit mode on devices that support 24-bit audio.
• Updates an issue with a blurry sign in screen. 
• Updates an issue with Windows Update becoming unresponsive when checking for updates. 
• Updates an issue that causes File Explorer to stop working when you browse directories of raw images and other file types. 
• Improves the tablet experience for convertible or hybrid devices in docked scenarios. 
• Improves the user experience of the Windows Hello enrollment pages for face and fingerprint setup. 
• Updates an issue that prevents you from unlocking a device if you typed a space before the username when you first signed in to the device. 
• Updates an issue that causes applications to take a long time to open.
• Addresses an issue that prevents apps from downloading an update or opening in certain scenarios. 
• Updates an issue that causes Microsoft Office applications to close unexpectedly when using a Korean IME.
• Updates time zone information for the Yukon, Canada. 

 The complete list of improvements and fixes can be found in KB4571744.

To download and install the update, go to Settings -> Update and Security ->  Windows Update and select Check for updates.  The standalone package for this update is available in the Microsoft Update Catalog.  In addition, with Windows Update, the latest SSU (KB4570334) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.

Windows 10 update history

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...

Mozilla Firefox Version 80.0.1 Released

Mozilla sent Firefox Version 80.0.1 to the release channel today with a number of bug fixes. 

At the time of this posting, Firefox ESR remains at Version 68.12.



Fixed

• Fixed a performance regression when encountering new intermediate CA certificates (bug 1661543)
  
• Fixed crashes possibly related to GPU resets (bug 1627616)
  
• Fixed rendering on some sites using WebGL (bug 1659225)
  
• Fixed the zoom-in keyboard shortcut on Japanese language builds (bug 1661895)
  
• Fixed download issues related to extensions and cookies (bug 1655190)
  

References

• Common questions after updating Firefox
• Security Updates
• Release Notes
• Rapid Release Calendar

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...