Changes since 7.54u1:
Security
* Solved data URL issue described in Secunia Advisory SA13818
* Additional fixes for frame injection issue reported in Secunia Advisory
SA13253
Miscellaneous
* Improvements to handling of the must-revalidate directive.
* Solved stability issue in Japanese version.
UNIX specific
* Added extra warning dialog when opening .sh, .desktop or executables
directly from Web or from transfer manager with kfmclient exec. Addresses
issue reported in Secunia Advisory SA13447.
* Fixed crash when importing e-mail.
Also add a 'opera-distinfo' make target, which takes care to update
distinfo for all supported ports, which should significantly reduce
amount of necessary manual work on package updates.
version 7.54:
- Tightened origin check for frames, fixing issue reported in Secunia Advisory
13253. A side effect of this is that documents not passing the origin check
will open in a new page.
- Fixed issue reported by Marc Schönefeld: intrusive JavaScript or Java applet
could exploit Sun Java vulnerability to retrieve logged-in user's username
and install directory.
- Fixed LiveConnect class access security issue reported by Jouko Pynnönen.
- Fixed download issue reported by Andreas Sandblad, Secunia Research,
described in Secunia Advisory 12981: periods and non-breaking spaces in
content-type header type could obscure file type.
- Improved support for the "must-revalidate" cache directive.
Changes since 7.53:
Security
* Denied write-access to properties on objects from scripts that
fail a standard origin check, in order to block potential access
by attackers to user's computer. Fixes critical vulnerability
reported in GreyMagic Security Advisory GM#008-OP.
* Fixed security issue regarding spoofing of the addressfield by
loading other page contents while keeping the URL, reported in
Secunia Advisory SA12162.
* Blocked access to file:/ URLs from documents that are not themselves
loaded from file:/ URLs.
Miscellaneous
* Fixed problem with canceling connections/downloads.
* Cache-size limitation improved.
Changes since Opera 7.52:
Security
* Fixed a JavaScript problem that made it possible to show one URL
in the address bar, but load a different URL in the page
(Secunia Advisory SA12028)
Only the Linux binary tested, but updated also the Solaris/FreeBSD version
of the pkg.
version stays at 7.51 due to lack of test facility.
Changes since 7.51 (from the changelog for windows):
Security
Fixed a URI obfuscation weakness enabling impersonation of legitimate web
sites. Illegal characters in addresses will be stripped. This addresses
Security Focus Bugtraq ID #10517.
Solved frame injection vulnerability that allowed for spoofing (Secunia
Advisory SA11978).
Solved certificate verification problem.
Miscellaneous
Changed search.ini to ensure correct default dictionary and encyclopedia
searches. On how to protect customized files from being overwritten, see
Release Note.
Changed main toolbar. Now includes options Open, Save, Print, Find, Home,
Panels, Tile, and Cascade.
Various stability and rendering improvements.
"Show in" submenu for messages now has nested display of nested filters.
Corrected message reply behavior when View > Encoding is set to autodetect.
Fixed SSL renegotiation problem causing login trouble on certain secure sites.
Solved issue concerning JavaScript method "confirm()".
Various encoding-related improvements to accommodate Japanese language
version.
Tested on NetBSD 1.6.2 and Solaris. Installed on FreeBSD but could not
run it without X.
From the (minimal) ChangeLog:
Various stability improvements
Redirecting links correctly marked as visited
Initial support for quoting selected text in messages
Solved problem with duplicate addresses when using "Reply all"
Hightlights:
* User interface redesigned
* Added Chat client
* Added RSS newsfeeds
* Fast full-text indexing of e-mail messages
* Support for spell check (via aspell)
* Graphical smileys in chat and e-mail
Note: on upgrade, e-mail from previous Opera versions will be
reindexed for faster searching and sorting. The new e-mail format
is not backward compatible, so earlier versions of Opera
won't be able to read the mail once this happens.
For details, see:
http://www.opera.com/linux/changelogs/750/http://www.opera.com/linux/changelogs/750b1/
Changes:
Addressing two issues reported by Jouko Pynnönen:
- Forced placement of downloaded skin-files in undesirable locations
- Buffer overflow when processing skins
- Additionally, added an OpenSSL ASN.1 patch. (from OpenSSL 0.9.6k, November 4, 2003)
Changes:
Privacy and security
* Opera 7.22 includes Sun Java version 1.4.2_01
* Security update specifically addressing the downloading of setup files
in Opera (bug reported by S.G. Masood)
* Fix for completion of help-file URL shortcuts
Fixes pkg/23437 by Hideyuki KURASHINA
(used to run the netscape plugins) has the motif library it depends on; while
opera-plugins takes care of this, I prefer direct depend in opera7 package
this adresses PR pkg/21734 by Kai Puolamaki
bump all dependancies to SuSE pkgs >= 7.3, since this is what opera7 was
tested against; the >= 6.[34] could be put back if someone confirms
opera7 actually works correctly with SuSE 6.3, 6.4 libraries
Changes detailed in http://www.opera.com/linux/changelogs/711b2/,
most importantly:
* UI improvements
* some shortcut additions
* M2 (the mail client) fixes
* Fixed two security issues
* Various DOM improvements
* Stability/Plug-in/Spelling fixes
