Pale Moon Version 28.9.0 Released With Security-Related Fixes

[Corrine]

Pale Moon version 28.9.0 has been released.  The update is a major development update with new features, changes/fixes as well as security-related fixes.

The update includes DiD ("Defense-in-Depth") updates.  A DiD update is s a fix that does not apply to a (potentially) actively exploitable vulnerability in Pale Moon, but prevents future vulnerabilities caused by the same code, e.g. when surrounding code changes, exposing the problem, or when new attack vectors are discovered.

Update:  To get the update now, select "Help" from the Pale Moon menu at the upper left of the browser window.  Click About Pale Moon and Check for Updates.

Release Notes

[plodr]

Quite a jump from 28.4 to 28.9
I hope this fixes an issue I've had since the beginning of 2020. YouTube is painfully slow and on other websites, it is not uncommon for me to see (not responding) up in the title bar.

[plodr]

Two strange happenings: the update lost my login info for all of my email sites that I've looked at so far  and YouTube is fixed BUT I'm now showing the yellow blurb at the top that the browser will soon not be supported. <sigh>
For the time being, I'm letting the yellow band stay since YouTube is working better than it has for months.

[Corrine]

Here's the solution from the Pale Moon Forum at 28.9.0 and YouTube - Pale Moon forum

With the new PM version, it's the same old YouTube yellow-banner warning.

If anyone's interested, this is the user string I used to get rid of it:

Code Select Expand

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:62.0) Gecko/20100101 Firefox/62.0 (Pale Moon)

[plodr]

I'm more concerned about the login snafu. Every time I close my browser, it forgets my email logins. (Even though all the sites and passwords are showing when I look at passwords under preferences/options).
I'm afraid to update the other 3 computers because it is a pain to type in the username and the password when I want to check email.

[satrow]

No such issues here, either with the test version or release, might be related to an extension?

[satrow]

There seems to be some issue on Linux, probably this change: https://github.com/MoonchildProductions/UXP/issues/1473#issuecomment-603337819

[ky331]

I encountered the yellow banner on Youtube, on my (32-bit) Win8.1 HP Stream7 tablet.   Additionally, Yahoo Mail forced me back to "classic" mail from the modern/enhanced version.

In contrast, everything is working normally on my (64-bit) Win10 system [on which I'm running 32-bit PaleMoon].

[ky331]

From the PM forum https://forum.palemoon.org/viewtopic.php?f=3&t=24048&start=20#p186281

Starts with
%OS_SLICE% is not an anomaly. It was put there on purpose instead of a build-time hard-coded OS version, but there's something wrong with the code that replaces it.

and ends saying:

Sorry for the inconvenience. We'll have an update for affected operating systems once we figure out the exact nature of the problem and patch for it.

[plodr]

My homepage name and login is remembered. One email teknik, username and password remembered. This site is remembered; I haven't been to all my sites yet.
Juno and gmail username is remembered but I have to type in the password.
Yahoo (I ordinarily use classic so I can't comment on switching to classic) and Outlook username has to be typed it then after clicking password has to be typed in.

Perhaps if I go into my password list and remove only the problem sites, I'll get a popup asking me if I want to save the information and it will clear up.

As far as addons, nothing has been changed since before I installed the update this morning. It was working fine in 28.4 now in 28.9 things are broken.

[plodr]

I found someone with the same problem
https://forum.palemoon.org/viewtopic.php?f=3&t=24050

I think I will go back to v 28.4 on my desktop computer. I removed the problem sites (username and password) but I get no prompt to save the password so it doesn't help.

[ky331]

Palemoon v28.9.0.1 (2020-03-25)
This is a small update to address a breaking issue with user-agent override strings, causing problems on certain websites for a number of our users.


Remark:  It did NOT fix the problems on my Win8.1 system.
(I do NOT intend to update my Win10 system, which is working okay with 28.9.0.)

[plodr]

I found a download for 28.4.1 (32 bit) and installed it. Phew, everything is working again. I go to my email sites, type in a password and it asks if I want to save the password. Yes!
If you want to install it while you wait for a fix

Code Select Expand

https://www.filehorse.com/download-pale-moon-32/39473/

I'm not updating the other computers.

Perhaps something in the 32 bit is broken besides what they find. There aren't too many of us using 32 bit computers.

The one thing that is bugging me is the default theme is opaque and instead of a solid color, I see my desktop background on my bookmarks toolbar. It makes it hard to see some of the words beside my icons. I went looking for another theme with a solid color and every theme offered is for PM 28.6 and above so I can't install another theme. They have removed the old themes I was using and I don't have them archived.

hmmm, I might be able to grab a theme from one of the three computers that was never updated.

[ky331]

It looks like Moonchild (and JustOff) found a typo in the code, that he believes is responsible for all the errors people are encountering:
https://forum.palemoon.org/viewtopic.php?f=3&t=24048&start=20#p186370

(Click on SHOW if you want to read the details...)

So now it would appear that we just have to wait for him to fix it, and issue a new update.

[plodr]

Since mine is working okay with the downgrade to 28.4.1, I'm not in any hurry to be one of the first to try the latest version. The one downside is that YouTube is back to being painfully slow.

The 64 bit version might be okay but I'm not ready to install it on my laptop and have to downgrade like I did on my desktop. I didn't see lots of people complaining about the issue we are seeing running on 32 bit computers.

I go look at the forum and read the complaints. I like Palemoon but frankly Moonchild is so arrogant that I hesitate to post a problem there. He'll simply say, "it's fine" and assume there is something wrong with me or my computer.