34.3.1_ReleaseWindowsLinux
Pale Moon 34.3.1
Changed 3
- Pale Moon will now exclude local resources from <base> CSP checks, aligning it with the rest of CSP handling
- Updated libpng to 1.6.58+apng
- Updated NSS to 3.90.12 (UXP)
Fixed 2
- Fixed an issue where the devtools JSON viewer would, in some cases, make erroneous requests to remote servers
- Fixed several intermittent and rare crashes
Security 1
- Addressed CVE-2026-12318 (CWE-125), CVE-2026-12322, CVE-2026-12292 (DiD), and multiple other security issues
This a security and bugfix release.
Changes/fixes:
- Pale Moon will now exclude local resources from CSP checks, aligning it with the rest of CSP handling.
- Fixed an issue where the devtools JSON viewer would, in some cases, make erroneous requests to remote servers.
- Updated libpng to 1.6.58+apng.
- Updated NSS to 3.90.12 (UXP), addressing multiple security issues.
- Fixed several intermittent and rare crashes.
- Security issues addressed: CVE-2026-12318 (CWE-125), CVE-2026-12322, CVE-2026-12292 (DiD), and multiple other issues that did not have a CVE designation at the time of patching.