Pale Moon for Android 25.9 released!

[Moonchild]

As the title indicates, this is a security update on the previous build of PM4A. This is not a milestone release and builds on the Pale Moon 25.* (pre-Goanna) era code.

This update:

• Implements security fixes for currently-known and applicable security vulnerabilities to our code base for Android
• Changes the supported cipher suites and protocols for Sync, specifically enabling TLS 1.2 on KitKat and later, and GCM modes on Lollipop and later.
  In addition, it moves key exchanges to Elliptic Curves as opposed to standard DHE with limited keysizes (due to Java) providing Forward Secrecy for Sync.
  This should allow people to move on from RC4 and DHE/RSA setups on their own sync servers.

Note on the second point: The Pale Moon Sync server will, in due time, also be reconfigured to no longer allow weaker ciphers from older versions of PM4A. At that point in time, older versions of PM4A will no longer be able to use Pale Moon Sync for synchronization and will either have to use a private Sync server or upgrade to 25.9 of PM4A or later.

Pale Moon's APK is, as usual, available in the Google Play store in a few hours, or downloadable right now from here for sideloading:

Mirror 1 (US): here.
Mirror 2 (EU): here.

It's also available from GamersHell. (might be published with a slight delay there)

Alternatively, you can grab it from our FTP server:
Download: ftp://publicandroid:get@ftp.palemoon.org/releases/palemoon-25.9.android-arm.apk

Code: Select all

palemoon-25.9.android-arm.apk
Size: 24,055,090 Bytes
SHA-1: 1aef1a5ea5a108b4b2f926953428e56b8ca47b85
SHA-256: e47a3d03ea4341e866285e662788dd4ad3efee45c589468c0d71c1f3aefc833e
Whirlpool: bfe34e038f0e782a16b529ca34ca91ff1f0578e53aa2ee70bea7a5e3eb1e964a89e4421bda7c25abc521251a4de81a8bf4bea8fa2a4c462c5446da4c2b4c3be4

[x-15a2]

Thanks for continuing to maintain PM4A, it is appreciated!

[Al6bus]

Pale moon 25.9 for android 2.3
a one-time event

Moderator note: link removed

[KNTRO]

The Pale Moon for Android webpage needs an update, huh?

[Moonchild]

Pale moon 25.9 for android 2.3
a one-time event

Please don't do this. Take down your APK.

[Al6bus]

It's only one time dose of happiness for few pm lovers)) It works pretty well.
I am no longer going to do this in the future! What's the problem?

[gi_jimbo]

Thanks for continuing to maintain PM4A, it is appreciated!

Appreciated here too!

[Moonchild]

It's only one time dose of happiness for few pm lovers)) It works pretty well.
I am no longer going to do this in the future! What's the problem?

http://www.palemoon.org/redist.shtml

You're distributing an officially-branded, unchecked version of the browser that has a different signature (and therefore locks users' data into your one-time build) while having the same package id, that has obviously been altered to make it work on Android 2.3 without listing the changes or supplying the source. You're breaking with the redist license for binaries, our branding rules and with the MPL...

[Al6bus]

Okay, I see. Sorry for that

[Moonchild]

Okay, I see. Sorry for that

It's OK, just don't do it again