Pale Moon: baixar versions anteriors

This is a performance, bugfix and security release.

Changes/fixes:
- Disabled the new :has() CSS implementation by default for performance reasons. See implementation notes.
- Added a preference for handling of improper form element placement in HTML. See implementation notes.
- Fixed several application crashes.
- Backported an upstream libvpx VP8 decoder fix.
- Fixed an issue in the BigInt implementation for specific JavaScript calls failing.
- Fixed a potentially exploitable memory leak.
- Security issues addressed: CVE-2026-100822, CVE-2026-100783, CVE-2026-100773 (DiD), CVE-2026-96869 (DiD) and CVE-2026-100791.
Implementation notes:
- The implementation for the CSS :has() pseudo element selector was disabled by default for causing additional severe performance issues on websites. This reduces web compatibility for some sites, but the feature turned out to have too much of a performance-impacting issue to leave it enabled by default. This should improve performance of the browser across the board while we investigate the root cause of this performance impact in our development going forward. Expect this feature to be enabled again later on after we have addressed the performance issues.
If you don't mind the performance impact or have fast hardware, you can enable the feature with the preference layout.css.has-pseudo.enabled (set it to true) for broader website compatibility at the cost of processing.
- In v35, we tightened our handling of form elements in HTML documents for security reasons, to adhere more strictly to the HTML standard regarding forms in tables. A detailed explanation can be found in this forum topic, including how to fix it in the documents or potential workarounds. You can control this with the preference html5.forms.standards_compliant. By default this is set to true to adhere to the spec, but you can (temporarily) disable this with false (with a page reload) to allow more lax parsing of forms similar to pre-v35 versions of Pale Moon.

This is a bugfix and security release.

Changes/fixes:
- Fixed a major performance bug with the new :has() implementation.
- Fixed potential undefined behavior in float to int32 conversions.
- Made checking for structural errors in XML-based files more strict.
- Fixed a crash in the WeakRef implementation.
- Fixed a potential issue in UI tooltips (DiD).
- Fixed a regression in XSLT transformations that would result in incorrect output.
- Security issues addressed: CVE-2026-92016 (DiD), CVE-2026-92044, CVE-2026-92049, CVE-2026-92030 and CVE-2026-92012.

This is a milestone release with many changes, primarily focused on web compatibility.

New features:
- Pale Moon now uses a number of compatibility shims/polyfills by default. This will provide compatibility bridging with the following: Document.elementFromPoint(s) with non-finite args, the GetAnimations API, image.decode(), Intl.DisplayNames API, Intl.ListFormat API, Intl.RelativeTimeFormat API, Intl.Segmenter API, in addition to pipethrough(), pipeto(), TextDecoderStream, TextEncoderStream and TransformStream methods of the Streams API. See implementation notes.
- Implemented the CSS revert-layer keyword.
- Implemented CSSStyleSheet replaceSync.
- Implemented the CSS :has() pseudo class.
- Implemented support for adoptedStyleSheets.
Changes/fixes:
- Firefox compatibility mode had its version updated to 140 by default. Of course this can still easily be overridden (globally or per-site) where necessary.
- JavaScript garbage collection and DOM cycle collection have been given a number of important fixes to better deal with heavy modern websites that would not properly release their resources. The "ghostbuster" workaround for lingering window objects has been removed in tandem as it is no longer necessary.
- Removed old and obsolete code from the platform related to ancient or completely unsupported compile targets.
- The uppercase version of ß (eszett/scharfes S) will now always mirror the lowercase writing method. See implementation notes.
- Added more updates for LoongArch64 (including full JIT) and Mac/PPC support.
- Linux/FreeBSD: Added a GTK2 dependency toggle to build NPAPI support without GTK2. This allows Pale Moon to build plugin support on systems with no GTK2 packages.
- Removed the unused "network tickler" module, an inherited component that could ping wireless networks on a regular interval.
- Modernized std::*<T>::value/::type to their _v and _t suffix forms, respectively, aligning with more modern C++ language standards and compiler behavior.
- Updated CSS aspect-ratio to be more spec-compliant.
- Updated flex container buttons to report a definite size (avoiding 0-sized elements on some websites).
- Restored the ability to compile Pale Moon on MIPS targets.
- Fixed an issue with possible hangs in recursive restyling calls (causing a recursive reflow storm), avoiding potentially long browser hangs/lockups.
- Updated several parts of the ICU code for better internationalization support.
- Linux: Improved typing performance on some complex pages.

Security fixes:
- Updated the internal json viewer for better handling of resources.
- Updated NSS to 3.90.14.0 (UXP) to pick up several security fixes.
- As usual, many potential security reports/issues were examined and ported where applicable to our code.
- Security issues addressed: CVE-2026-74982, CVE-2026-74969 (DiD), CVE-2026-74977 (DiD), CVE-2026-74945, CVE-2026-74964, CVE-2026-74971, CVE-2026-74943, and several others that did not have a CVE designation at the time of evaluation.

Implementation notes:
- Pale Moon now includes and preloads a number of compatibility shims/polyfills on web pages, to respond to the constant rapid adoption of draft specs and syntactic sugar in websites, primarily driven by top-heavy JavaScript frameworks that target primarily Chrome-based layout engines. While this isn't ideal, it's a pragmatic solution that solves major web compatibility issues with frameworks that are extremely intolerant to not having an exact expected feature set or collection of web APIs. There are a few caveats with this approach which we've adopted from a sibling project (Basilisk), primarily that it may not universally work on all sites, in particular very strict content security policies might interfere, and it's not the most performant solution imaginable (although given the heft of JS framework sites, this is likely barely noticeable).
- Primarily in German, the ß character (known as "eszett" or "scharfes S") can be written with its proper character or w

This is a security and minor web compat release.

Changes/fixes:
- Implemented the URL.Parse() convenience function.
- Added multiple bounds checks on internal browser functions to avoid potential out-of-bounds accesses, underflows and overflows. (DiD)
- Fixed several issues with loading and parsing content-supplied fonts.
- Set a bottom limit on the frequency for audio samples to avoid a whole class of potential bugs surrounding audio loading, processing and playback.
Audio formats with a sample rate below 8kHz (the commonly accepted lowest sample rate of "telephone"/"walkie-talkie" quality) are now rejected.
- Fixed a potential issue in CSS rounded corners with dotted styling.
- Image elements in forms are no longer associated if they are not in the same subtree.
- Made image animation checks more strict to avoid potential issues if decoding would be slow.
- Video region checks are now more strict to avoid issues with malformed video files.
- Updated NSS to 3.90.13.0 (UXP) addressing all applicable security issues from NSS upstream.
- Another large security audit of over 200 sec bugs in Mozilla land has been performed, with the vast majority not being applicable to our code base (primarily e10s/IPC bugs).
- Security issues addressed: CVE-2026-16353, CVE-2026-16408, CVE-2026-16389 and many others that do not have a CVE designation.

This a security and bugfix release.

Changes/fixes:
- Pale Moon will now exclude local resources from <base> CSP checks, aligning it with the rest of CSP handling.
- Fixed an issue where the devtools JSON viewer would, in some cases, make erroneous requests to remote servers.
- Updated libpng to 1.6.58+apng.
- Updated NSS to 3.90.12 (UXP), addressing multiple security issues.
- Fixed several intermittent and rare crashes.
- Security issues addressed: CVE-2026-12318 (CWE-125), CVE-2026-12322, CVE-2026-12292 (DiD), and multiple other issues that did not have a CVE designation at the time of patching.

This is a small update to address 2 important usability/stability issues.

Changes/fixes:
- Fixed intermittent JavaScript engine crashes due to the newly-implemented FinalizationRegistry code.
- Fixed a webaudio channel mixing regression resulting in broken audio.

This is a major development, bugfix and security release.
Special thanks to all the contributors (you know who you are!) for major work done on the platform internals this cycle, making Pale Moon better than ever :)

New features:
- Added powerPreference to canvas WebGL context for web compatibility.
- Implemented support for the lch color space in CSS.
- Added a base implementation for CSS stylesheet constructors.
- Added a base implementation for CSS aspect-ratio sizing.
- Added support for CSS min(), max() and clamp() functions.
- Added support for CSS logical border radius properties.
- Added support for ranges in CSS media queries.
- Added support for CSS shadow parts.
- Added support for degenerate CSS values infinity, -infinity and NaN.
- Implemented full LoongArch64 Baseline/Ion/WASM JIT compiler support.
- Added AV1 decoding with Dav1d for more performant AV1 video playback on 64-bit builds. See implementation notes.
Note: AV1 is now enabled by default on Dav1d-supported configurations.
- Added ES2024 Arraybuffer transfer APIs (resize, transfer, transferToFixedLength, detached, maxByteLength and resizable).
- Added support for growable/resizable SharedArrayBuffers and DataViews.
- Added ES2024 grouping builtins (map .groupBy).
- Added ES2024 resolver builtins (.withResolvers()).
- Added ES2024 String well-formed functions (.isWellFormed() and .toWellFormed()).
- Added support for symbols as weak collection keys.
- Added support for Atomics.waitAsync.
- Added support for FinalizationRegistry (part of the WeakRef spec).
Changes/fixes:
- Switched our build system to Python 3. See implementation notes.
- Linux: removed dbus-glib dependency.
- Linux: Added EGL as a preferred OpenGL provider with GLX fallback; GLX remains the configured default as there are still some unresolved issues with EGL.
- Improved JS performance by porting across various enhancements from Mozilla.
- Fixed various application crashes.
- Further improved compatibility with building for Loongson architectures.
- Further improved hardware accelerated decoding of WMF videos.
- Fixed ARM assembler issues in the Goanna back-end.
- Improved parallel JS parsing tasks.
- Improved CSS handling of calc() for web compatibility, allowing it in many more places (e.g. color() and z-index).
For compatibility and performance reasons, we still strongly recommend that you use CSS variables to make calculations where possible.
- Ported several smaller performance improvements from the Dactyloidae project.
- Aligned CSS border width calculations with mainstream, for web compatibility. Please note that this may impact some themes that might rely on fractional border rounding (instead of truncation).
- Removed the CloudFlare workaround introduced in 34.2.0 as it should no longer be necessary with general image size handling improvements. The preference will no longer do anything.
- White-listed driver vendors for VMWare, VirtualBox, VirtIO and Parallels to allow hardware accelleration as much as possible in VM environments.
- Changed the implementation of WeakRef support to be always enabled in its full implementation.
- Fixed some build issues on NetBSD.
- Mac: Fixed a pertinent crash due to font handling on OS X 10.7 through 10.11.
- Mac: Fixed build compatibility with 32-bit MacOS and Mac on PowerPC hardware.
- Fixed a devtools crash on Big Endian machines.
- Fixed an issue causing rendering artifacts on excessively large border-radius values (e.g. Tailwind CSS).
Security fixes:
- Fixed a stack corruption issue in nsLocaleService that could lead to crashes.
- Implemented some ANGLE upstream fixes.
- Updated NSS to 3.90.11 (UXP), picking up a number of upstream security fixes.
- Another large security audit was performed of 190 security-sensitive reported bugs. Many security issues were addressed, including potential crash scenarios and code correctness issues.
As a summary: 18 potential vulnerabilities were found applicable and fixed, another 18 issues had DiD code cha

This is a stability and security release.

Changes/fixes:
- Fixed a regression in 34.2.1 that would cause crashes to desktop when using certain extensions or visiting certain websites.
- Fixed potential security issues with audio channel mixing, MP3 decoding (DiD), international text display, DOM workers (DiD), reading of files (DiD), and the ANGLE graphics library.

This is a bugfix and security release.
Note for FreeBSD users: our binaries from this version forward require FreeBSD v14 or later.

Changes/fixes:
- Fixed a regression leading to cursive languages (where multiple characters combine) not being rendered correctly (e.g. Arabic).
- Updated our cookie magic prefix handling, adding __Http- and __Host-Http- magic prefixes and aligning our implementation with RFC 6265bis.
- Updated our Brotli library to 1.2.0+ (1.2.0 with additional fixes).
- Updated NSS to 3.90.10.0 (UXP). For clarity, the version now carries the (UXP) label to distinguish this fork (which has additional mitigations) from the 3.90 branch of NSS maintained by Mozilla.
- A large audit of security issues was performed. Many security issues were addressed, including potential crash scenarios and code correctness issues.
As a summary: 50 potential vulnerabilities were found applicable and fixed, 20 issues had DiD code changes applied, and 4 were already mitigated by us before being reported.
Of the reported vulnerabilities, 270 were not applicable to our code (with the vast majority pertaining to e10s/multi-process browser architecture) and 6 low-impact ones were marked for further investigation at a later time.