08-22-2017 , 08:59 PM
http://www.palemoon.org/releasenotes.shtml Pale Moon: Release notes
27.4.2 (2017-08-22)
This is a small update to address some security and stability issues.
Changes/fixes:
Fixed a number of crashes.
Enabled the opt-in debugging feature to log SSL keys to a file in all builds.
Added a fix for TLS 1.3 handshakes causing a browser hangup.
Handshakes should be considerably faster now and no longer stall in the wrong circumstances.
Security fixes:
Updated NSPR to 4.15.
Updated NSS to 3.31.1.
Fixed a DoS issue using overly long Username in URL scheme (CVE-2017-7783)
Fixed an issue where (cross domain) iframes could break scope (CVE-2017-7787)
Fixed an issue in WindowsDllDetourPatcher (CVE-2017-7804)
Fixed an issue with elliptic curve addition in mixed Jacobian-affine coordinates (CVE-2017-7781)
Fixed a UAF in nsImageLoadingContent (CVE-2017-7784)
Fixed a UAF in WebSockets (CVE-2017-7800)
Fixed a heap-UAF in RelocateARIAOwnedIfNeeded (CVE-2017-7809) DiD (accessibility is disabled)
DiD This means that the fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem. : http://www.palemoon.org/palemoon-win32.shtml Download Pale Moon x86 - 27.4.2
New this release: Details about this update can be found in the Release notes.
These downloads are the most compatible version of Pale Moon.
Minimum System Requirements:
Windows Vista*/Windows 7/8/10/Server 2008 or later
Windows Platform Update (Vista/7) strongly recommended
A processor with SSE2 instruction support
256 MB of free RAM (512 MB or more recommended)
At least 150 MB of free (uncompressed) disk space
*Our support for Windows Vista is limited. Please consider upgrading your O.S. if you are having trouble with the browser.
Download locations
File size for the installer is 30.5 MiB
SHA-256: 8f9cce4cf63ae15d2b0800620d310ffd633dfe91cc739bfc2925ece00dc3bff1
(to check your download, you can use a tool like WinHasher)
GPG/PGP signature: [Sig]
Link (click to download)
Description
Pale Moon logo
Pale Moon mirror #1 (EU)
Direct download link
Pale Moon logo Pale Moon mirror #2 (US)
Direct download link
Pale Moon logo Pale Moon mirror #3 (Asia)
Direct download link : https://www.virustotal.com/#/file/8f9cce.../detection One engine detected this file
SHA-256 8f9cce4cf63ae15d2b0800620d310ffd633dfe91cc739bfc2925ece00dc3bff1
File name palemoon-27.4.2.win32.installer.exe
File size 30.57 MB 1 / 64
Last analysis 2017-08-22 19:18:52 UTC
Community score +37 Cylance
Unsafe (false positive by Cylance Security Company) File Names
palemoon-27.4.2.win32.installer.exe
7zS.sfx
7zS.sfx.exe
Packers
F-PROT NSIS, Unicode, appended, 7Z, UPX
PEiD UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
Signature Info
Signature Verification
Signed file, valid signature
File Version Information
Copyright Moonchild Productions
Product Pale Moon
Description Pale Moon
Original Name 7zS.sfx.exe
Internal Name 7zS.sfx
File Version 4.42
Date Signed 2:04 PM 8/22/2017
Signers
Markus Straver
StartCom Class 2 Object CA
StartCom Certification Authority
Counter Signers
COMODO SHA-256 Time Stamping Signer
USERTrust (Code Signing)
27.4.2 (2017-08-22)
This is a small update to address some security and stability issues.
Changes/fixes:
Fixed a number of crashes.
Enabled the opt-in debugging feature to log SSL keys to a file in all builds.
Added a fix for TLS 1.3 handshakes causing a browser hangup.
Handshakes should be considerably faster now and no longer stall in the wrong circumstances.
Security fixes:
Updated NSPR to 4.15.
Updated NSS to 3.31.1.
Fixed a DoS issue using overly long Username in URL scheme (CVE-2017-7783)
Fixed an issue where (cross domain) iframes could break scope (CVE-2017-7787)
Fixed an issue in WindowsDllDetourPatcher (CVE-2017-7804)
Fixed an issue with elliptic curve addition in mixed Jacobian-affine coordinates (CVE-2017-7781)
Fixed a UAF in nsImageLoadingContent (CVE-2017-7784)
Fixed a UAF in WebSockets (CVE-2017-7800)
Fixed a heap-UAF in RelocateARIAOwnedIfNeeded (CVE-2017-7809) DiD (accessibility is disabled)
DiD This means that the fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem. : http://www.palemoon.org/palemoon-win32.shtml Download Pale Moon x86 - 27.4.2
New this release: Details about this update can be found in the Release notes.
These downloads are the most compatible version of Pale Moon.
Minimum System Requirements:
Windows Vista*/Windows 7/8/10/Server 2008 or later
Windows Platform Update (Vista/7) strongly recommended
A processor with SSE2 instruction support
256 MB of free RAM (512 MB or more recommended)
At least 150 MB of free (uncompressed) disk space
*Our support for Windows Vista is limited. Please consider upgrading your O.S. if you are having trouble with the browser.
Download locations
File size for the installer is 30.5 MiB
SHA-256: 8f9cce4cf63ae15d2b0800620d310ffd633dfe91cc739bfc2925ece00dc3bff1
(to check your download, you can use a tool like WinHasher)
GPG/PGP signature: [Sig]
Link (click to download)
Description
Pale Moon logo
Pale Moon mirror #1 (EU)
Direct download link
Pale Moon logo Pale Moon mirror #2 (US)
Direct download link
Pale Moon logo Pale Moon mirror #3 (Asia)
Direct download link : https://www.virustotal.com/#/file/8f9cce.../detection One engine detected this file
SHA-256 8f9cce4cf63ae15d2b0800620d310ffd633dfe91cc739bfc2925ece00dc3bff1
File name palemoon-27.4.2.win32.installer.exe
File size 30.57 MB 1 / 64
Last analysis 2017-08-22 19:18:52 UTC
Community score +37 Cylance
Unsafe (false positive by Cylance Security Company) File Names
palemoon-27.4.2.win32.installer.exe
7zS.sfx
7zS.sfx.exe
Packers
F-PROT NSIS, Unicode, appended, 7Z, UPX
PEiD UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
Signature Info
Signature Verification
Signed file, valid signature
File Version Information
Copyright Moonchild Productions
Product Pale Moon
Description Pale Moon
Original Name 7zS.sfx.exe
Internal Name 7zS.sfx
File Version 4.42
Date Signed 2:04 PM 8/22/2017
Signers
Markus Straver
StartCom Class 2 Object CA
StartCom Certification Authority
Counter Signers
COMODO SHA-256 Time Stamping Signer
USERTrust (Code Signing)