Pale Moon Version 28.7.2 Released with Security Updates

[Corrine]

Pale Moon has been updated to version 28.7.2. This is a security and bugfix update.

From the Release Notes:

Changes/fixes:

• Disabled the use of ICC color profiles for images on Linux by default.
  
• Updated timezone data for internationalization functions.
  
• Fixed the option to use hardware acceleration over RDP for Windows 8.1 and 10.
  
• Fixed an issue with inner window navigation potentially leaking.
  
• Fixed a startup crash caused by Qihoo 360 Safeguard/360 Total Security.
  
• Ported some expat parser fixes from upstream.
  
• Ported several NSS upstream fixes to our build.
  
• Aligned handling of U+0000 in the html5 parser with expectations.
  
• Added size checks to WebGL data buffering.
  
• Fixed build issues with newer glibc versions.
  
• Fixed build issues for ARM targets.
  
• Worked around a gcc9 compiler issue that would prevent building with it.
  
• Sec bug fixes: CVE-2019-15903, CVE-2019-11757, CVE-2019-11763 and several potentially exploitable crashes and memory safety hazards that don't have a CVE number.
  
• Unified XUL Platform Mozilla Security Patch Summary: 6 fixed, 6 DiD, 1 rejected, 24 not applicable.
  

Update: To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window. Click About Pale Moon and Check for Updates.

[plodr]

Thanks. I wonder how I missed this yesterday?