Pale Moon Version 25.4 Released

[Corrine]

Pale Moon has been updated to version 25.4. This is a major update which numerous fixes/changes as well as security updates.

Important: If you use a language pack, make sure to update it to the latest version! Although automatic updates are enabled for language packs, double-check that the version matches. If you are using an older language pack with this version of the browser, some dialog boxes may come up blank.


Security fixes:

• Fixed several memory safety hazards (UAF/DF/UU); applicable bugs covered by CVE-2015-0815 and CVE-2015-0815.
• Fixed CVE-2015-0811 [qcms] heap info leak.
• Fixed CVE-2015-0810 clickjacking attacks via a Flash object in conjunction with DIV elements.
• Fixed CVE-2015-0801 a variant of CVE-2015-0818.
• Fixed CVE-2015-0800 improve randomness of DNS resolver queries on Android.
• Fixed CVE-2015-0798 access to privileged URLs through about: redirector.

See the Release Notes for the extensive list of fixes, changes and additions.

 

[Corrine]

Pale Moon Version 25.4.1 Released

From Pale Moon - Release Notes:

This is a small but important update to the previous major release to address some critical issues:

• Fixed loss of the browser's disk cache on startup due to incorrect corruption detection logic
• Fixed a browser crash on some HTML5 games