Bug 59503

Summary:	net-www/opera-7.54 Fixes several security issues
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	lanius
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
URL:	http://www.opera.com/linux/changelogs/754/
Whiteboard:	A4 [glsa] jaervosz
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-08-05 04:27:52 UTC

From ChangeLog:

Security:

-Denied write-access to properties on objects from scripts that fail a standard origin check, in order to block potential access by attackers to user's computer. Fixes critical vulnerability reported in GreyMagic Security Advisory GM#008-OP.

-Fixed security issue regarding spoofing of the addressfield by loading other page contents while keeping the URL, reported in Secunia Advisory SA12162.

-Blocked access to file:/ URLs from documents that are not themselves loaded from file:/ URLs.

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-08-05 04:37:44 UTC

*** Bug 58511 has been marked as a duplicate of this bug. ***

Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-08-05 04:38:09 UTC

Heinrich please bump

Comment 3 Heinrich Wendel (RETIRED) gentoo-dev

2004-08-05 06:40:26 UTC

bumped and marked stable on x86

Comment 4 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2004-08-05 07:09:07 UTC

Thx Heinrich for the quick bump.

amd64, sparc please mark stable

ppc please mark ~

Comment 5 Tom Martin (RETIRED) gentoo-dev

2004-08-05 09:31:19 UTC

Marked stable on amd64.

Comment 6 Gustavo Zacarias (RETIRED) gentoo-dev

2004-08-05 10:38:52 UTC

Stable on sparc.

Comment 7 Thierry Carrez (RETIRED) gentoo-dev

2004-08-05 11:11:18 UTC

Keywords all set, ready for a GLSA

Comment 8 Thierry Carrez (RETIRED) gentoo-dev

2004-08-05 13:45:34 UTC

GLSA 200408-05