MX 17/18 Repository: The Pale Moon Browser Thread

Locked
Message
Author
User avatar
Stevo
Developer
Posts: 12776
Joined: Fri Dec 15, 2006 8:07 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#131 Post by Stevo »

I'll get to it. There's also my repo on the OBS that you could install from--it usually finishes all the Ubuntu and Debian packages in 30-60 minutes.

User avatar
dreamer
Posts: 738
Joined: Sun Oct 15, 2017 11:34 am

Re: MX 17 Repository: The Pale Moon Browser Thread

#132 Post by dreamer »

Stevo wrote: Fri Jul 05, 2019 7:27 pm I'll get to it. There's also my repo on the OBS that you could install from--it usually finishes all the Ubuntu and Debian packages in 30-60 minutes.
Thanks, I installed it (Debian 9 x64 version) through gdebi. Is this the same build that will show up in the MX repo?

Kulmbacher
Posts: 426
Joined: Fri Apr 27, 2018 2:47 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#133 Post by Kulmbacher »

Data breach post-mortem
...
A malicious party gained access to the at the time Windows-based archive server)(archive.palemoon.org) which we've been renting from Frantech/BuyVM, and ran a script to selectively infect all archived Pale Moon .exe files stored on it (installers and portable self-extracting archives) with a variant of Win32/ClipBanker.DY (ESET designation). Running these infected executables will drop a trojan/backdoor on your system that would potentially allow further compromise to it.

The moment this was reported to me on A malicious party gained access to the at the time Windows-based archive server (archive.palemoon.org) which we've been renting from Frantech/BuyVM, and ran a script to selectively infect all archived Pale Moon .exe files stored on it (installers and portable self-extracting archives) with a variant of Win32/ClipBanker.DY (ESET designation). Running these infected executables will drop a trojan/backdoor on your system that would potentially allow further compromise to it.

The moment this was reported to me on 2019-07-09,
https://forum.palemoon.org/viewtopic.php?f=17&t=22526


just windows, but symptom for security of palemoon servers?
they called him, the fish!

User avatar
Stevo
Developer
Posts: 12776
Joined: Fri Dec 15, 2006 8:07 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#134 Post by Stevo »

We're OK, because we get and build the source from Github, so avoid any contact with their servers altogether. The OBS builds also never had any contact with their server.

User avatar
Stevo
Developer
Posts: 12776
Joined: Fri Dec 15, 2006 8:07 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#135 Post by Stevo »

dreamer wrote: Fri Jul 05, 2019 9:47 pm
Stevo wrote: Fri Jul 05, 2019 7:27 pm I'll get to it. There's also my repo on the OBS that you could install from--it usually finishes all the Ubuntu and Debian packages in 30-60 minutes.
Thanks, I installed it (Debian 9 x64 version) through gdebi. Is this the same build that will show up in the MX repo?
It's pretty much the same exact program, though the OBS version is seen as a higher version because of the way they are named.

User avatar
Stevo
Developer
Posts: 12776
Joined: Fri Dec 15, 2006 8:07 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#136 Post by Stevo »

Pale Moon 28.6.1 is now in the main repo. All users should update.

User avatar
dreamer
Posts: 738
Joined: Sun Oct 15, 2017 11:34 am

Re: MX 17 Repository: The Pale Moon Browser Thread

#137 Post by dreamer »

Thanks!

User avatar
Gordon Cooper
Posts: 965
Joined: Mon Nov 21, 2011 5:50 pm

Re: MX 17 Repository: The Pale Moon Browser Thread

#138 Post by Gordon Cooper »

Have updated to 28.6.1 and it works fine. Thanks.
Backup: Dell9010, MX-19_B2, Win7, 120 SSD, WD 232GIB HD, 4GB RAM
Primary :Homebrew64 bit Intel duo core 2 GB RAM, 120 GB Kingston SSD, Seagate1TB.
MX-18.2 64bit. Also MX17, Kubuntu14.04 & Puppy 6.3.

User avatar
Stevo
Developer
Posts: 12776
Joined: Fri Dec 15, 2006 8:07 pm

Re: MX 17/18 Repository: The Pale Moon Browser Thread

#139 Post by Stevo »

We now have updated to 28.7.1 in the main repository. All users are urged to update.
Fixed an issue where saving a webpage to disk would sometimes drop tags from the document.
Fixed an issue with click-to-play plugin content throwing up a blank notification.
Fixed an issue in the renderer where region intersections would sometimes return the wrong result.
This fixes a regression caused by the fix for CVE-2016-5252.
Fixed security issues: CVE-2019-11744, CVE-2019-11752, CVE-2019-11737, CVE-2019-11746, CVE-2019-11750, CVE-2019-11747 and CVE-2019-11738.
Unified XUL Platform Mozilla Security Patch Summary: 7 fixed, 1 DiD, 1 already covered, 22 not applicable.

mjtux
Posts: 45
Joined: Thu May 24, 2018 2:03 am

Re: MX 17/18 Repository: The Pale Moon Browser Thread

#140 Post by mjtux »

Beginning with version 28.6.0, Pale Moon browser began crashing frequently on MX.
The browser would crash and immediately the desktop also. It went all the way down to the login screen.
I had not seen any posts about Pale Moon crashes following the updates.
All of the PM updates remained fine with Mint 19.2 Cinnamon - never crashed.
I thought it might be a problem with that build, but the crashes continued after the next updates, including v28.7.1.

The crashes seemed to happen during page navigation, so I thought it might be the mouse going bad.
The same thing happened with keyboard only use.

I tried Safe Mode - no luck.
I tried a reinstall - no luck.
I tried remove and reinstall - no luck.
I tried complete removal with Synaptic and fresh install - no luck; even with no add-ons installed.

Finaly, I thought it might be the optional setting in MX Tweak -> Config Options that I had turned ON to remedy screen tearing.
Use Intel driver instaed of default "modsetting" driver

I deactivated that setting, did a restart and then a fresh install.
Then, no more crashes :yay: , but the screen tearing was back.
I reactivated the Intel option and did another restart.
Still no more crashes. :smile:

During the interim, I installed Waterfox and got it configured the way I like and there were no crashes.
So now I'm happy with Waterfox. :dodance:


Since this turned out to be a hardware/driver compatibility issue with Pale Moon on MX 18.3, I think it's best to post an alert.
This could have other consequences.
MX 19/18.3 64 bit - Intel Core i5-8600K - ASRock H370M mobo - 8GB HyperX mem - Intel integrated graphics
Samsung 840 EVO 120GB; ADATA 240GB nvme; Western Digital Black 1TB

Locked

Return to “Package Requests/Status - MX 17/18”