Pale Moon Version 28.4.0 Released with Security Updates

[Corrine]

Pale Moon has been updated to version 28.4.0. This is a major development, stability and security release. The Linux versions will follow later today.

Note that the update includes fixes identified as "DiD" ("Defense-in-Depth") which means that it is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Release Notes

 

[Digerati]

I don't know. DiD sounds like a fancy marketing term for "'Other' bugfix".

Regardless, I am glad they are looking "deep", not just for current issues, but for bugs that could cause problems in the future.

 

[Corrine]

Pale Moon frequently includes DiD updates. Note also that the Microsoft monthly "Release Notes" include the following statement:

In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.