Pale Moon has been updated to version 33.4.0.  This is a development and security update. 

Changes/fixes:

• Introduced the "ghostbuster" concept; this is an automated internal mechanism to attempt cleanup of particularly problematic web content after a tab or window is closed. See implementation notes.
• Added support for the PROT_MPROTECT security feature on targets that use it (notably PaX and NetBSD).
• Implemented preferences to give the user control over the Same-Origin Policy (SOP) and CORS preflight. See implementation notes.
• Improved buildability on NetBSD and Altivec architectures.
• Fixed building issues on Apple Silicon Mac with XCode 16.
• Added workarounds for non-standard MSE/WebM/VPx encoding on YouTube that could cause video buffering and halting issues.
• Dev: Changed the default credentials mode for module scripts from 'omit' to 'same-origin', aligning with mainstream.
• Dev: Implemented getTransform and setTransform with DOMMatrix arguments.
• Dev: Implemented ES2023 Hashbang grammar proposal.
• Fixed an issue with JavaScript's StructuredClone.
• Security issues addressed: CVE-2024-9396.
• Rejected: CVE-2024-9398 (properly informing the user about attempts to use unhandled protocols by web pages is considered more important than potential determination whether a handler for such a protocol is installed)

Implementation notes:

• When very complex "modern" websites get closed by the user, it is possible that the browser is unable to properly release all the resources attached to it, especially those resources, modules and scripts that were part of Shadow DOM or complex interlinked module scripts. This can then result in "detached" web content and scripts that continue to use memory, have active event listeners and loaded scripts. Mainstream browsers are less affected by this as their multi-process setups will effectively "throw the baby out with the bath water" by simply killing the relevant content process. Since we don't have that luxury of a lazy solution to an architectural problem, we need to handle these so-called "ghost windows" resulting from this problem internally without restarting the browser process. This version of Pale Moon introduces the "ghostbuster" concept to try and address this: an automated, internal mechanism that periodically checks for the existence of ghost windows and severs links of them, so that garbage/cycle collection can come in afterwards and release the resources, hopefully preventing browser slowdowns and inflated memory usage over time. If this, for some reason, causes issues for you, you can disable the ghostbuster by setting the preference browser.ghostbuster.enabled to false. Also please report (in detail) on the forum about the issue you're having if flipping this preference to false resolves it, so we can look into improving this new feature.
• By user request, primarily for advanced power users who need this for their local setups, 2 new preferences were introduced to control how the browser deals with same-origin and CORS.
• security.same_origin_policy.enabled, when set to false, will completely disable checking if scripts are allowed to be loaded based on the same-origin policy. Security warning: this is a really bad idea on the open web and you should never blanket disable the Same-Origin Policy check in a web browser for normal use.
• content.cors.bypass_preflight_request, when set to true, will no longer send CORS preflight requests or check preflight responses and always allow cross-origin requests. Note that this kind of request is normally only made if sending a request to a server might result in data changes server-side (e.g. POST). This preference only does something when CORS is already disabled; provided primarily for specific corner cases where CORS is disabled and preflight checks (providing an extra safety net for server data) need to be shut off too.
There are dragons hiding in these two preferences. Please handle them responsibly.

*DiD: This means that a fix is "Defense-in-Depth": It is a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

**Rejected security patches: This means that patches were theoretically applicable to our code but considered undesirable, which could be due to unwanted changes in behavior, known regressions caused by the patches, or unnecessary risks for stability, security or privacy.

Pale Moon includes both 32- and 64-bit versions for Windows: Pale Moon for Windows downloads.

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Select About Pale Moon > Check for Updates.

Release Notes

Browser Guard will now send helpful notifications to users when they visit a website belonging to a company that has suffered a proven data breach in the past 90 days, perhaps warning users about recent data breaches they never heard about.
(Browser Guard will not send repeat notifications that pester return users.)

Browser Guard is also making it easier to stay private online by automatically opting users out of data collection performed by tracking cookies that are littered across the internet, with no extra effort required on users' behalf...  "cookie consent" forms will now be auto-rejected, thus requesting the site to honor the most privacy-preserving settings.

https://www.malwarebytes.com/blog/personal/2024/10/browser-guard-now-flags-data-breaches-and-better-protects-personal-data?

SpywareBlaster database update 10/5/2024


 9 NEW items (IE/ActiveX)

11 NEW items (Edge/Scripts)

for a total of 19,312 items in database

After updating, be sure to manually enable all protection.

Adobe is releasing an update with new features and bug fixes for Acrobat and Reader.

Update or Complete Download

Adobe Acrobat and Reader were updated to version 24.003.20180.  Updates should become available via the internal updater or checks can be manually activated by choosing Help/Check for Updates. 

Reader DC and other versions are available here: https://get.adobe.com/reader/

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

Release Notes

Dev Channel update to 131.0.2863.0 is live

Added Features:

• Added a 'Restart' option in the Prism Collections setting toggle within the webui2 settings.
• Introduced a '...' menu to the tab center.

Improved Behavior:

• Resolved an issue where browser would crash when opening a new InPrivate tab from the app's contextual menu or widget on iOS.

Changed Behavior:

• Resolved an issue where clicking on links sometimes opened them in the desktop browser instead of within Game Assist.
• Resolved an issue where the stamp function could draw incomplete graphics directly on the border in screenshots.
• Mac:
• Resolved an issue where browser opens without FRE and becomes non-functional on Mac.
• Android:
• Fixed an issue where Talkback announced the 'x' button as 'unlabeled' in the 'Notifications' pane under the browser's Account Menu on Android.
• Fixed an issue where the shopping UI remained visible on Android after being opened and the system's return button was pressed.
• iOS:
• Resolved an issue where the address bar on the NTP disappears in landscape mode on iOS.
• Resolved an issue where the top sites names were misaligned on the ZIP page in iOS.
• Fixed an issue where Top sites icons displayed abnormally when adding or removing top sites in split-screen mode on iOS.
• Fixed an issue where the read aloud bar for online PDFs appeared on other pages in iOS.
• Fixed an issue where Voiceover remained silent when loading search results on iOS.

Geesh

I talk to myself enough and don't need to add talking to my computer. 😄