<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>216022</bug_id>
          
          <creation_ts>2008-04-03 11:00 0000</creation_ts>
          <short_desc>www-client/opera: Release 9.27 fixes various security issues (CVE-2008-{1761,1762,1764})</short_desc>
          <delta_ts>2008-04-14 23:03:28 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://www.opera.com/docs/changelogs/linux/927/</bug_file_loc>
          <status_whiteboard>B2 [glsa]</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>hanno@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>jer@gentoo.org</cc>
    
    <cc>ollonois@gmx.de</cc>

      

      
          <long_desc isprivate="0">
            <who>hanno@gentoo.org</who>
            <bug_when>2008-04-03 11:00:38 0000</bug_when>
            <thetext>From Changelog:
Security

    * Fixed an issue where newsfeed prompts could cause Opera to execute arbitrary code, as reported by Michal Zalewski. See our advisory.
    * Solved an issue where resized canvas patterns could cause Opera to execute arbitrary code, as reported by Michal Zalewski. See our advisory.
    * Improved keyboard handling of password inputs, as reported by Trystan S. 

No CVEs yet.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-04-03 13:22:59 0000</bug_when>
            <thetext>*** Bug 216021 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-03 15:18:05 0000</bug_when>
            <thetext># ChangeLog for www-client/opera
# Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/www-client/opera/ChangeLog,v 1.209 2008/04/03 15:14:14 jer Exp $

*opera-9.27 (03 Apr 2008)

  03 Apr 2008; Jeroen Roovers &lt;jer@gentoo.org&gt; +opera-9.27.ebuild:
  Version bump (bug #216022)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fauli@gentoo.org</who>
            <bug_when>2008-04-03 16:40:35 0000</bug_when>
            <thetext>Thanks Jer. Let&apos;s go arches.
Target:
www-client/opera-9.27
KEYWORDS=&quot;amd64 ppc sparc x86 ~x86-fbsd&quot;</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>maekke@gentoo.org</who>
            <bug_when>2008-04-03 19:47:48 0000</bug_when>
            <thetext>amd64/x86 stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2008-04-06 20:23:46 0000</bug_when>
            <thetext>ppc stable</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-07 16:48:04 0000</bug_when>
            <thetext>Marked stable for SPARC.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jer@gentoo.org</who>
            <bug_when>2008-04-07 16:53:53 0000</bug_when>
            <thetext>opera-9.26.ebuild removed from the tree.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>pva@gentoo.org</who>
            <bug_when>2008-04-08 05:41:22 0000</bug_when>
            <thetext>Fixed in release snapshot.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>rbu@gentoo.org</who>
            <bug_when>2008-04-14 23:03:28 0000</bug_when>
            <thetext>GLSA 200804-14</thetext>
          </long_desc>
      
    </bug>

</bugzilla>