4 files changed, 39 insertions, 19 deletions
diff --git a/palemoon/debian/bgstack15-prefs.js b/palemoon/debian/bgstack15-palemoon-prefs.js
index ec7ab94..d944010 100644
--- a/palemoon/debian/bgstack15-prefs.js
+++ b/palemoon/debian/bgstack15-palemoon-prefs.js
@@ -1,13 +1,16 @@
-// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-prefs.js
+// file: /usr/lib/palemoon/browser/defaults/preferences/bgstack15-palemoon-prefs.js
+// deployed with palemoon-stackrpms package (rpm or dpkg) built by bgstack15
+// last modified 2019-03-27
 // reference:
 //    https://support.mozilla.org/en-US/kb/customizing-firefox-using-autoconfig
-pref("browser.backspace_action", 0);
 pref("browser.allTabs.previews", false);
+pref("browser.backspace_action", 0);
 pref("browser.ctrlTab.previews", false);
 pref("browser.download.useDownloadDir", true);
 pref("browser.newtab.choice", 1);
 pref("browser.newtabpage.storageVersion", 1);
 pref("browser.search.update", false);
+pref("browser.sessionstore.restore_on_demand", false);
 pref("browser.startup.page", 3);
 pref("browser.tabs.closeWindowWithLastTab", false);
 pref("captivedetect.canonicalURL", "http://127.0.0.1:9980");
@@ -15,7 +18,9 @@ pref("extensions.enabledAddons", "%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:28.
 pref("extensions.shownSelectionUI", true);
 pref("extensions.update.autoUpdateDefault", false);
 pref("general.warnOnAboutConfig", false);
+pref("network.automatic-ntlm-auth.trusted-uris", ".ipa.smith122.com");
 pref("network.cookie.prefsMigrated", true);
+pref("network.negotiate-auth.trusted-uris", ".ipa.smith122.com");
 pref("network.stricttransportsecurity.preloadlist", false);
 pref("privacy.sanitize.migrateFx3Prefs", true);
 pref("security.cert_pinning.enforcement_level", 0);
diff --git a/palemoon/debian/changelog b/palemoon/debian/changelog
index 54456ae..24911ec 100644
--- a/palemoon/debian/changelog
+++ b/palemoon/debian/changelog
@@ -1,3 +1,19 @@
+palemoon (28.4.1-1devuan) manual; urgency=low
+
+  * New 28.4.1 security and bugfix release:
+    - Fixed hover state arrows on some controls.
+    - Fixed potential denial-of-service issues involving FTP (loading of subresources and spamming errors).
+    - Disabled Microsoft Family Safety (Win 8.1) by default. This prevents security issues as a result of a local MitM setup.
+    - Added several site-specific overrides (Firefox Send and polyfill.io) to work around website UA-sniffing isues.
+    - Implemented the origin-clean algorithm for controlling access to image resources.
+    - Cleaned up the helper application service code.
+    - Ported applicable security fixes from Mozilla (CVE-2019-9791, CVE-2019-9792, CVE-2019-9796, CVE-2019-9801, CVE-2019-9793, CVE-2019-9794, CVE-2019-9808 and ZDI-CAN-8368).
+    - Implemented several defense-in-depth measures (for CVE-2019-9790, CVE-2019-9797, CVE-2019-9804, and a JavaScript issue).
+    - Fixed several memory safety hazards and crashes.
+    - Binaries are now code-signed again (including the setup program for the installer).
+
+ -- B Stack <bgstack15@gmail.com>  Fri, 29 Mar 2019 14:42:19 -0500
+
 palemoon (28.4.0-1devuan) manual; urgency=low
 
   * Import new 28.4.0 major development and security release:
diff --git a/palemoon/debian/control b/palemoon/debian/control
index a7f177f..eca609c 100644
--- a/palemoon/debian/control
+++ b/palemoon/debian/control
@@ -4,27 +4,26 @@ Priority: optional
 Maintainer: B Stack <bgstack15@gmail.com>
 Bugs: mailto: <bgstack15@gmail.com>
 XSBC-Original-Maintainer: Steven Pusser <stevep@mxlinux.org>
-Build-Depends: debhelper (>= 9),
+Build-Depends: autoconf2.13,
+        debhelper (>= 9),
         gcc (>= 4.9),
-        autoconf2.13,
-        python (>= 2.7),
-        unzip,
-        zip,
-        pkg-config,
-        libgconf2-dev (>= 1.2.1),
-        libgtk2.0-dev (>= 2.14),
-        libdbus-glib-1-dev (>= 0.60),
-        yasm (>= 1.1),
         libasound2-dev,
-        libpulse-dev,
-        libxt-dev,
+        libbz2-dev,
+        libdbus-glib-1-dev (>= 0.60),
         libegl1-mesa-dev,
-        libx11-xcb-dev,
-        zlib1g-dev,
-        libssl-dev,
+        libgconf2-dev (>= 1.2.1),
+        libgtk2.0-dev (>= 2.14),
         libsqlite3-dev,
-        libbz2-dev,
+        libssl-dev,
+        libx11-xcb-dev,
+        libxt-dev,
+        pkg-config,
+        python (>= 2.7),
         python-dbus,
+        unzip,
+        yasm (>= 1.1),
+        zip,
+        zlib1g-dev,
 Standards-Version: 3.9.6
 Homepage: http://www.palemoon.org/
 
diff --git a/palemoon/debian/install b/palemoon/debian/install
index e04cc8f..506544e 100644
--- a/palemoon/debian/install
+++ b/palemoon/debian/install
@@ -1,2 +1,2 @@
 application/palemoon/branding/official/palemoon.desktop usr/share/applications
-debian/bgstack15-prefs.js /usr/lib/palemoon/browser/defaults/preferences/
+debian/bgstack15-palemoon-prefs.js /usr/lib/palemoon/browser/defaults/preferences/