• Back to all articles

SuSE: New Opera packages fix security vulnerability

Opera 11.11 fixes a security vulnerability. Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional techniques will have to be employed. Updated packages are available from download.opensuse.org.

  openSUSE Security Update: opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2011:0688-1
Rating:             important
References:         #694567 
Affected Products:
                   openSUSE 11.4
                   openSUSE 11.3
______________________________________________________________________________

  An update that contains security fixes can now be
  installed. It includes one version update.

Description:

  opera 11.11 fixes a security vulnerability. Citing
  http://www.opera.com/support/kb/view/992/:

  Framesets allow web pages to hold other pages inside them.
  Certain frameset constructs are not handled correctly when
  the page is unloaded, causing a memory corruption. To
  inject code, additional techniques will have to be employed.


Patch Instructions:

  To install this openSUSE Security Update use YaST online_update.
  Alternatively you can run the command listed for your product:

  - openSUSE 11.4:

     zypper in -t patch opera-4588

  - openSUSE 11.3:

     zypper in -t patch opera-4588

  To bring your system up-to-date, use "zypper patch".


Package List:

  - openSUSE 11.4 (i586 x86_64) [New Version: 11.11]:

     opera-11.11-1.2.1
     opera-gtk-11.11-1.2.1
     opera-kde4-11.11-1.2.1

  - openSUSE 11.3 (i586 x86_64) [New Version: 11.11]:

     opera-11.11-1.2.1
     opera-gtk-11.11-1.2.1
     opera-kde4-11.11-1.2.1


References:

  https://bugzilla.novell.com/694567