Welcome!
Important information
-- Spectre and Meltdown vulnerabilities
-- Change in MX sources

News
-- MX Linux on social media: here
-- Mepis support still here

Current releases
-- MX-17.1 Final release info here
-- antiX-17 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

M12/MX 14 Community Repo: The Pale Moon Browser Thread

News about updates on package status for CR packages compiled for MEPIS 12.0
Message
Author
User avatar
v3g4n
Forum Guide
Forum Guide
Posts: 1783
Joined: Sat Jan 16, 2016 8:20 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#71 Post by v3g4n » Sun Sep 25, 2016 12:09 am

Thanks much for your feedback! :happy:

User avatar
v3g4n
Forum Guide
Forum Guide
Posts: 1783
Joined: Sat Jan 16, 2016 8:20 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#72 Post by v3g4n » Sat Oct 01, 2016 9:41 pm

palemoon 26.5.0 is now available in the main repo and syncing across all mirrors.
26.5.0 (2016-09-28)
Fixes/Changes:
Implemented a breaking CSP (content security policy) spec change; when a page with CSP is loaded over http, Pale Moon now interprets CSP directives to also include https versions of the hosts listed in CSP if a scheme (http/https) isn't explicitly listed. This breaks with CSP 1.0 which is more restrictive and doesn't allow this cross-protocol access, but is in line with CSP 2 where this is allowed.
Fixed an issue with the XML parser where it would sometimes end up in an unknown state and throw an error (e.g. when specific networking errors would occur).
Improved the performance of canvas poisoning by explicitly parallelizing it.

Security fixes:
Fixed a potentially exploitable crash related to text writing direction. (CVE-2016-5280)
Made checking for invalid PNG files more strict. Pale Moon will now reject more PNG files that have corrupted/invalid data that could otherwise lead to potential security issues.
Changed the way paletted image frames are allocated so the space is cleared before it's used. DiD
Fixed a crash in nsNodeUtils::CloneAndAdopt() due to a typo. DiD
Fixed several memory safety issues and crashes.

DiD This means that the fix is "Defense-in-Depth": It is a fix that does not apply to an actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#73 Post by Stevo » Sun Dec 04, 2016 7:41 pm

Whoops, missed the major 27.0.1 update news for this platform--probably because of some difficulty in building packages. Anyway, that's solved and we now have a minor 27.0.2 update:

A small bugfix update, 27.0.2, should now be in the main repository.

The next 27.1 release is supposed to dump the problematic gstreamer in favor of using ffmpeg directly for multimedia playback.

User avatar
Gordon Cooper
Forum Guide
Forum Guide
Posts: 1903
Joined: Mon Nov 21, 2011 5:50 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#74 Post by Gordon Cooper » Sun Dec 04, 2016 7:48 pm

Been running 27.0.2 for a few days. No observed problems.
Homebrew64 bit Intel duo core 2 GB RAM, 120 GB Kingston SSD, Seagate1TB.
Primary OS : MX-17.1 64bit. Also MX17, Kubuntu14.04 & Puppy 6.3.
Dell9010, MX-17.1, Win7

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#75 Post by Stevo » Thu Feb 23, 2017 6:53 pm

Since PM 27.1.0 proved stable enough, we now have the next 27.1.1 update in the main repository.

This is a stability and bugfix update to the browser.

Changes/Fixes:

Implemented a fix in media handling to prevent crashes with concurrent videos and/or rapidly starting/stopping video playback in the browser.
Fixed the way the Adobe Flash plugin is detected to prevent confusion with other plugins that identify themselves as "Flash" (e.g. VLC).

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#76 Post by Stevo » Wed Mar 08, 2017 2:44 pm

A minor bugfix 27.1.2 update is now in the main repository. It aims to fix multimedia playback issues for certain sites.

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#77 Post by Stevo » Thu Mar 30, 2017 3:08 pm

The bugfix Pale Moon 27.2.1 release is now in the main M12/MX 14 repo and should be propagating across the mirrors.

Technical stuff follows:

- Changes/Fixes:
- Fixed an issue with planar alpha handling (transparency) when drawing
JXR images.
- Fixed a crash related to a change JavaScript array handling introduced
in 27.2.0. This became apparent with the pentadactyl extension, but
could happen in other situations as well.
- Fixed a crash when opening ridiculously large images with HQ scaling
enabled (default). Pale Moon will now only apply HQ scaling for images
within reasonable limits (64 Mpix or smaller). Images larger than that
may not display properly when zooming in, or may not display at all,
even scaled down (e.g. >256 Mpix large) and show a "broken image"
placeholder instead; please use dedicated image viewer applications for
those kinds of images; it is outside the scope of a web browser to
handle such large images.
- Changed the way URL hashes are handled, and will no longer %-decode
anchor hash identifiers by default. Note that this is against RFC 3986,
which states that any part of the URL scheme that isn't data should be
decoded. This is required for web compatibility because several sites
use hash links to pass actual data to web applications (Please don't do
this! Hashes are part of the URL address, should only consist of "safe"
characters, and aren't suited to pass arbitrary data) and the most
common browsers no longer follow the RFC in that respect. If you want
RFC compliance, switch dom.url.getters_decode_hash to true.
- Restored 2 RSA Camellia cipher suites that were missing:
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA and TLS_RSA_WITH_CAMELLIA_256_CBC_SHA.
- Fixed an issue with custom toolbars getting deleted during upgrade
from 27.0/27.1 to 27.2

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#78 Post by Stevo » Sun Apr 30, 2017 7:24 pm

Pale Moon 27.3.0 has now landed in the main repository.

The release announce reads "This is a major update with a good number of feature, security and stability updates. Please read the release notes for details".

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#79 Post by Stevo » Thu Jul 13, 2017 2:34 pm

Pale Moon released the 27.4.0 version yesterday, so we now have it built and in our main repo. This particular version has a "really" as part of the version, since apparently the github has a 27.4.0 tarball release that's not what they meant, and I used that first. I still don't really get what was going on.

Anyway, this version has a lot of improvements to the embedded media playback, along with other fixes. Read all about them here.

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15794
Joined: Fri Dec 15, 2006 8:07 pm

Re: M12/MX 14 Community Repo: The Pale Moon Browser Thread

#80 Post by Stevo » Sat Aug 05, 2017 9:57 pm

Pale Moon 27.4.1 has landed in the main repository. This is a minor update that addresses:


Fixed an issue where media playback would not use hardware acceleration properly when using MSE.
This would cause high CPU usage and/or choppy playback for HD video on e.g. YouTube.
Fixed ES6 iterator chains to be spec-compliant.
Fixed ES6 vector append calls and some related memory leaks.
Added a workaround to reduce the likelihood of a potential rare (timing-critical) crash.

Post Reply

Return to “Package Status - 12.0 Beta”