Pale Moon 33.6.1 + x64 + Portable + XP + Rus

Вчера вышел Pale Moon 33.7.0

This is a security, bugfix and stability update.
Important: Mac and FreeBSD builds will be updated soon. They are currently not yet ready due to builder absence.

Changes/fixes:
Simplified some WASM code generation in the Ion JIT compiler.
Fixed a crash in loading external resource maps.
Disabled potentially unsafe attempts at recovering JIT operations.
Fixed some minor linking issues in about:rights.
Updated the embedded emoji font to fix incorrect display of some of the wheelchair emoji.
Security issues addressed: CVE-2025-1934 (DiD).

Vseslav (21 декабря 2024 05:03) Сообщение #1675
Пользовался Mypale - модификацией Pale Monn. Но человеку, кто модифицировал запретили модифицировать. Последняя версия 2.9.3 немного устарела и не открывает все сайты, например, VK.com

This is a small bugfix and security release.

Changes/fixes:
Changed the way cookies are handled internally to fix an issue with cookie database corruption as a result of updates to domain suffixes.
Fixed an issue with Alternative-Services protocol negotiation.
Fixed a potential crash scenario with Structured Clone operations. DiD
Fixed a potential issue with line breaking if out of memory.
Fixed a rare crash with opportunistic encryption.
Minor code cleanup.
Security issues addressed: CVE-2025-0239 and CVE-2025-0238.

Changes/fixes:
Implemented Regular Expression "match indices" (/d) feature.
Added a way to programmatically clear the DNS cache in the browser, and added a button to the UI for it in about:networking.
Updated handling of referrer policies to adhere to the updated spec.
CSS font variations keywords no longer throw an error. See implementation notes.
CSS border-radius will now also apply to element outlines.
Improved the display of amount of cached web content in preferences when cache is being cleared.
Improved the installer AVX check to skip on early versions of Windows 10 (which don't support it).
Updated NSS to 3.90.5 (unofficial) to pick up some security fixes.
Refreshed the built-in list of effective top-level domains.
Fixed several application crashes.
Reduced unnecessary debug/informative messages in release builds (WebGL and CSP).
Backed out building against ffmpeg 6.0 and ffvpx 6.0 for causing a video playback regression on full-range videos (levels 0-255).
Cleaned up a large amount of leftover Boot2Gecko code, simplifying code paths throughout the code base.
From this version forward we also publish language packs for Persian (Farsi), Hindi, Kannada and Vietnamese.
Security issues addressed: CVE-2024-11693 and CVE-2024-11704 (DiD).
Implementation notes:
The CSS font variations keywords (woff2-variations, truetype-variations, etc.) allow webmasters to indicate format hints for @font-face font resources so authors can provide alternative resources for browsers that don't support tech(variations). The intent of these hints is to provide an alternate font with variations in addition to regular fonts without. Unfortunately, some webmasters don't indicate a base font the variation font face would be an alternate for, which resulted in Pale Moon throwing an error on the only @font-face src entry provided, in turn having the web font not being loaded at all (because no valid entry was found), breaking website layout. From this version onwards, we parse the -variations keywords allowing variation alternative font-faces to be loaded, even if no base font was specified. To webmasters only supplying @font-face entries with variations keywords: please understand the intent of this CSS 4 spec and always provide a base font entry (graceful fallback).