Pale Moon Version 27.3 Released with Security Updates

[Corrine]

Pale Moon has been updated to Version 27.3. Note that Version 27.3 is a major development update with many changes in the media back-end. As a result, it is important to realize that some aspects are still a work in progress and some html5 video playback issues with MSE (Media Source Encryption) may be encountered. Included in the updates are DiD* patches.

To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window. Select About Pale Moon > Check for Updates.

*DiD stands for "Defense-in-Depth" and is a fix that does not apply to an actively exploitable vulnerability in Pale Moon but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.

Release Notes

 

[Corrine]

With the update to Pale Moon 27.3, the following security change was included:

Added an option to display punycode domain for IDN websites to combat phishing.
This is enabled by default for domain-validated https sites.
Preference: browser.identity.display_punycode
0 = Display IDN name in identity panel (previous behavior)
1 = Display punycode name for DV SSL domains (default)
2 = Also display punycode for HTTP sites if IDN name used

See IDN and Pale Moon: know your browser. for an explanation of the change.