Mageia alert MGASA-2012-0337 (opera)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0337: opera-12.11-1.mga (1,
 2/nonfree) 
Date:
    	     
 
Wed, 21 Nov 2012 21:08:08 +0100
Message-ID:
    	     
 
<20121121200808.GA15452@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0337
Date: 	November 21st, 2012
Affected releases: 	1, 2


Description:
The opera package prior to 12.11 contains several security problems:

HTTP response heap buffer overflow can allow execution of arbitrary
code. (kb 1036)

Error pages can be used to guess local file paths. (kb 1037)

Opera has been updated to 12.11 to fix above problems.


Updated Packages:
Mageia 1:
opera-12.11-1.mga1

Mageia 2:
opera-12.11-1.mga2


References:
http://www.opera.com/support/kb/view/1036/
http://www.opera.com/support/kb/view/1037/
https://bugs.mageia.org/show_bug.cgi?id=8162
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...