The Register® — Biting the hand that feeds IT

Feeds

Opera releases update for 'extremely severe' vulns

  • alert
  • print
  • tweet

Cross-platform performance

Free whitepaper – Transforming IT culture

Opera pushed out an update to its popular web browser on Tuesday that fixes vulnerabilities it described as "extremely severe".

The update fixes seven security bugs, some of which were previously known. Version 9.63 of the browser addresses separate code injection risks stemming from flaws in HTML parsing and text inputing, respectively. A critical bug with similar arbitrary code injection risks involving the handling of long host names in files has also been patched.

The latest version of the software also lances a cross-site scripting flaw, involving XSLT templates, as well as bugs in feed preview.

More details of these various fixes can be found on Opera Software's website here. That advisory covers Windows but other versions of the browser running on Mac and Linux also need updating against the similar cross-platform risks.

An advisory from Secunia clarifies that not all these bugs are brand new with one, at least, known about since last month.

Version 9.63 of the browser was pushed out to via the software built-in update mechanism on Tuesday. ®

Free whitepaper – Assuring application service quality

Sign up, sign up for The Register's weekly IT security newsletter - click here