Opera 9.62 Closes Security Holes
Norwegian provider Opera Software is releasing almost weekly security updates for its Opera browser. Version 9.62 is to address what the company deems two of its most critical security problems.
Opera Software found that its browser was subject to cross-site scripting attacks due to a bug in the links panel (see the advisory).
Another security breach designated as even more severe targeted the history search function. Passing certain parameters to the function could allow scripts executing arbitrary code to be injected into the search results page (see the advisory). Users are warned that if they opened public demonstrations of this issue, they could have altered certain Opera settings and that these settings need to be restored manually. Upgrading to 9.62 does not repair these settings.
The update to 9.62 is recommended for all Opera browser platforms (Linux, Windows and Mac OS X among them). Next to the security patches, the release also provides the Presto 2.1.1 rendering engine. Various download locations for the popular platforms are available.
Tag Cloud
News
-
Heartbleed Bleeds On
According to a report, many potential victims of the Heartbleed attack have patched their systems, but few have cleaned up the crime scene to protect themselves from the effects of a previous intrusion.
-
Drone Brain Goes Open Source
DARPA and NICTA release the code for the ultra-secure microkernel system used in aerial drones.
-
Password Management Services Vulnerable to Attack
Should you trust an online service to store your online passwords?
-
New Raspberry Pi Adds Two USB Ports
New B+ board lets you build cool things without the complication of a powered USB hub.
-
Microsoft Grabs No-IP.com Domains
Redmond rushes in to root out alleged malware haven.
-
Firefox Steps into 3D
New initiative will bring futuristic virtual reality effects to the web surfing experience.
-
New Trojan Targets Online Banking
Dyreza malware launches a man-in-the-middle attack that compromises SSL.
-
HP Rolls Out Massive Cloud Network
New cloud combines worldwide access with local attention to data security.
-
New Attack Targets Wireless Logins
A first cousin of the recent Heartbleed attack affects EAP-based wireless and peer-to-peer authentication.
-
Geeks Petition for Free Lenovo BIOS
FOSS community acts to protect freedom of choice for laptop devices.