Versie 25.3 is uitgekomen van Pale Moon. Deze webbrowser maakt gebruik van de broncode van Mozilla Firefox, maar is geoptimaliseerd voor moderne hardware. De Windows-versie van Mozilla Firefox wordt namelijk ontwikkeld met een zo groot mogelijke compatibiliteit in gedachte. Mede door concessies aan oudere hardware is de browser niet zo snel als hij zou kunnen zijn, aldus Pale Moon-maker Moonchild Productions.
Ten opzichte van Mozilla Firefox is onder meer ondersteuning voor oudere processors verwijderd. Ook zijn enkele zaken weggelaten, waaronder 'Accessibility features' en 'Parental controls'. Het resultaat is een browser die tot 25 procent beter zou presteren. Daarnaast is er een 64bit-versie van de browser beschikbaar. Meer informatie over het programma kan hier worden gevonden. Sinds versie 25 profileert Pale Moon zich meer als een eigen browser en niet meer als een alternatieve Firefox-versie.
De download van Pale Moon is alleen in het Engels, maar met behulp van dit taalbestand en een kleine aanpassing is het programma ook in het Nederlands te gebruiken. Het programma gebruikt zijn eigen profielmap en deelt deze niet met Firefox, waardoor het mogelijk is om de twee naast elkaar te gebruiken. In versie 25.3 zijn verder nog de volgende veranderingen en verbeteringen aangebracht:
Pale Moon 25.3.0
This is an important update to improve features and performance, as well as address important security issues.
Fixes/changes:Security fixes:
- Overhauled WebGL. It now properly supports depth textures, shadow mapping and glow shaders.
Note that older operating systems or older/embedded video processors may be limited in their support of these features.- Updated the ANGLE library to a much more current version.
- Removed the crash reporter code completely to improve overall browser responsiveness and operation.
Please note that a necessary victim of this has been the in-browser (devtools) SPS profiler because of its reliance on crash reporter data-gathering tools.- Removed the Mozilla Plugin Finder Service (no longer in use @Mozilla).
- Android: removed the Mozilla "product announcements" service.
- Re-added control of the number of concurrent tabs to be restored from a session with browser.sessionstore.max_concurrent_tabs (accepted values 1-10)
- Significantly improved performance and accuracy of date/time/timer handling.
- Significantly improved performance of the creation of DOM elements with plain text content.
- Added several significant performance optimizations for arrays and strings in javascript.
- Added several code performance optimizations and bugfixes in SVG, the presentation shell, SCTP, style gradients and CSS parsing routines. (Thanks, Axiomatic!)
- Added an "Open link in current tab" context menu entry on links for UI consistency.
- Updated styling of the browser with personas (lightweight themes) once more to improve display in tabs-on-top mode, improve overall legibility of tab text, and display of inverted close buttons on some controls on dark personas.
- Added a special case check for the Flash plugin version check on Linux failing due to commas instead of periods in the version string.
- Added Windows 10 compatibility in executable manifests.
- Android: Fixed a crash on GL canvas surfaces.
- Fixed incorrect Sync "howto" instruction links from the Sync dialogs.
- Fixed the color of selected tabs in Linux when personas (lightweight themes) are in use that do not match the overall tone of the OS system theme.
- Fixed a bug where a variable in parentheses would abort Javascript parsing.
- Fixed a bug where the address bar would incorrectly be cleared.
- Fixed padding issues for dropdown lists.
- Fixed DNS lookups so proper record types are requested for IPv4 and IPv6.
DiD This means that the fix is "Defense-in-Depth": It is a fix that does not apply to an actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code when surrounding code changes, exposing the problem.
- Disabled all RC4-based encryption ciphers by default. [More info]
- Fixed several miscellaneous memory safety hazards.
(applicable bugs related to CVE-2015-0835 and CVE-2015-0836)- Fixed loading of locally stored DLL files through the internal updater. (CVE-2015-0833)
- Fixed a potential crash point in IndexedDB. (CVE-2015-0831) DiD
- Fixed a double-free situation when using non-default memory allocators and a 0-length XHR. (CVE-2015-0828)
Note: production builds of Pale Moon were never vulnerable.- Fixed a crash using DrawTarget in the Cairo graphics library. (CVE-2015-0824)
- Fixed potential reading of local files through manipulation of form autocomplete. (CVE-2015-0822)
- Fixed a potential PNG heap-overflow crash. DiD
- Followed up on research regarding CVE-2014-8639 (see 25.2) and made cookie handling through proxies more restrictive again.
De volgende downloads zijn beschikbaar:
32bit-versie64bit-versieportable versie
:fill(white):strip_exif()/i/2004988410.jpeg?f=thumbmedium)
:strip_exif()/u/53522/crop583d477015a24.gif?f=community){kind=small}
/u/367878/crop68203cf741501_cropped.png?f=community){kind=small}
:strip_icc():strip_exif()/u/332059/Pineka.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/630253/4b8001781ceab258b7bf40f76426913e.jpeg?f=community){kind=small}
:strip_icc():strip_exif()/u/371860/crop683b701dcdc58_cropped.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/52878/crop5ba0cf47e6a2d_cropped.jpeg?f=community){kind=small}