Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 142.0.7444.134 | >= 142.0.7444.134 |
| www-client/google-chrome | * | < 142.0.7444.59 | >= 142.0.7444.59 |
| www-client/microsoft-edge | * | < 142.0.3595.53 | >= 142.0.3595.53 |
| www-client/opera | * | < 126.0.5744.0 | >= 126.0.5744.0 |
| www-client/vivaldi | * | < 7.7.3851.48 | >= 7.7.3851.48 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-142.0.7444.134"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-142.0.7444.59"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-142.0.3595.53"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-126.0.5744.0"
All Vivaldi users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.7.3851.48"
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 138.0.7204.92 | >= 138.0.7204.92 |
| www-client/google-chrome | * | < 138.0.7204.92 | >= 138.0.7204.92 |
| www-client/microsoft-edge | * | < 138.0.3351.65 | >= 138.0.3351.65 |
| www-client/opera | * | < 122.0.5643.17 | >= 122.0.5643.17 |
| www-client/vivaldi | * | < 7.5.3735.44 | >= 7.5.3735.44 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-138.0.7204.92"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-138.0.7204.92"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-138.0.3351.65"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-122.0.5643.17"
All Vivaldi users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.5.3735.44"
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 135.0.7049.95 | >= 135.0.7049.95 |
| www-client/google-chrome | * | < 135.0.7049.95 | >= 135.0.7049.95 |
| www-client/microsoft-edge | * | < 135.0.3179.85 | >= 135.0.3179.85 |
| www-client/opera | * | < 120.0.5543.8 | >= 120.0.5543.8 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-135.0.7049.95"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-135.0.7049.95"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-135.0.3179.85"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-120.0.5543.8"
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 145.0.7632.159 | >= 145.0.7632.159 |
| www-client/google-chrome | * | < 145.0.7632.159 | >= 145.0.7632.159 |
| www-client/microsoft-edge | * | < 145.0.3800.97 | >= 145.0.3800.97 |
| www-client/opera | * | < 130.0.5846.0 | >= 130.0.5846.0 |
| www-client/vivaldi | * | < 7.8.3925.76 | >= 7.8.3925.76 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser. Vivaldi is a powerful, personal and private browser that adapts to you.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-145.0.7632.159"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-145.0.7632.159"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-145.0.3800.97"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-130.0.5846.0"
All Vivaldi users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/vivaldi-7.8.3925.76"
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge, and Opera.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 131.0.6778.85 | >= 131.0.6778.85 |
| www-client/google-chrome | * | < 131.0.6778.85 | >= 131.0.6778.85 |
| www-client/microsoft-edge | * | < 131.0.2903.63 | >= 131.0.2903.63 |
| www-client/opera | * | < 116.0.5366.21 | >= 116.0.5366.21 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-131.0.6778.85"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-131.0.6778.85"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-131.0.2903.63"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-116.0.5366.21"
Multiple vulnerabilities have been found in Chromium, Google Chrome, Microsoft Edge. Opera.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 128.0.6613.84 | >= 128.0.6613.84 |
| www-client/google-chrome | * | < 128.0.6613.84 | >= 128.0.6613.84 |
| www-client/microsoft-edge | * | < 128.0.2739.42 | >= 128.0.2739.42 |
| www-client/opera | * | < 114.0.5282.21 | >= 114.0.5282.21 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, and Opera. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-128.0.6613.84"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-128.0.6613.84"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-128.0.2739.42"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-114.0.5282.21"
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 141.0.7390.107 | >= 141.0.7390.107 |
| www-client/google-chrome | * | < 141.0.7390.107 | >= 141.0.7390.107 |
| www-client/microsoft-edge | * | < 141.0.3537.71 | >= 141.0.3537.71 |
| www-client/opera | * | < 122.0.5643.142 | >= 122.0.5643.142 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
ll Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-141.0.7390.107"
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-141.0.7390.107"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-141.0.3537.71 "
All Oprea users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-122.0.5643.142"
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 134.0.6998.117 | >= 134.0.6998.117 |
| www-client/google-chrome | * | < 134.0.6998.117 | >= 134.0.6998.117 |
| www-client/microsoft-edge | * | < 134.0.3124.83 | >= 134.0.3124.83 |
| www-client/opera | * | < 119.0.5497.12 | >= 119.0.5497.12 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-134.0.6998.117"
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-134.0.6998.117"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-134.0.3124.83"
All Oprea users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-119.0.5497.12"
Multiple vulnerabilities have been discovered in Chromium and its derivatives, the worst of which can lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/chromium | * | < 124.0.6367.155 | >= 124.0.6367.155 |
| www-client/google-chrome | * | < 124.0.6367.155 | >= 124.0.6367.155 |
| www-client/microsoft-edge | * | < 124.0.2478.97 | >= 124.0.2478.97 |
| www-client/opera | * | < 110.0.5130.35 | >= 110.0.5130.35 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier. Opera is a fast and secure web browser.
Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-124.0.6367.155"
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-124.0.6367.155 "
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/microsoft-edge-124.0.2478.97"
All Oprea users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-110.0.5130.35"
Multiple vulnerabilities have been found in Opera, the worst of which can lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 73.0.3856.284 | >= 73.0.3856.284 |
| www-client/opera-beta | * | < 73.0.3856.284 | >= 73.0.3856.284 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-73.0.3856.284"
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-beta-73.0.3856.284"
Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 12.13_p1734 | >= 12.13_p1734 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted web page using Opera, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to obtain sensitive information, conduct Cross-Site Scripting (XSS) attacks, or bypass security restrictions.
A local attacker may be able to obtain sensitive information.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-12.13_p1734"
Multiple vulnerabilities have been found in Opera, the worst of which may allow remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 12.01.1532 | >= 12.01.1532 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers and Opera Release Notes referenced below for details.
A remote attacker could entice a user to open a specially crafted web page using Opera, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to trick a user into downloading and executing files, conduct Cross-Site Scripting (XSS) attacks, spoof the address bar, or have other unspecified impact.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-12.01.1532"
Multiple vulnerabilities have been found in Opera, the worst of which allow for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 12.00.1467 | >= 12.00.1467 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities have been discovered in Opera. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted web page, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. A remote attacker may be able to: trick users into downloading and executing arbitrary files, bypass intended access restrictions, spoof trusted content, spoof URLs, bypass the Same Origin Policy, obtain sensitive information, force subscriptions to arbitrary feeds, bypass the popup blocker, bypass CSS filtering, conduct cross-site scripting attacks, or have other unknown impact.
A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application or possibly obtain sensitive information.
A physically proximate attacker may be able to access an email account.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-12.00.1467"
Multiple vulnerabilities were found in Opera, the worst of which allow for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.64 | >= 9.64 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities were discovered in Opera:
A remote attacker could entice a user to open a specially crafted JPEG image to cause a Denial of Service or execute arbitrary code, to process an overly long file:// URL or to open a specially crafted web page to execute arbitrary code. He could also read existing subscriptions and force subscriptions to arbitrary feed URLs, as well as inject arbitrary web script or HTML via built-in XSLT templates.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.64"
Multiple vulnerabilities have been discovered in Opera, allowing for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.62 | >= 9.62 |
Opera is a fast web browser that is available free of charge.
Multiple vulnerabilities have been discovered in Opera:
These vulnerabilties allow remote attackers to execute arbitrary code, to run scripts injected into Opera's History Search with elevated privileges, to inject arbitrary web script or HTML into web pages, to manipulate the address bar, to change Opera's preferences, to determine the validity of local filenames, to read cache files, browsing history, and subscribed feeds or to conduct other attacks.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.62"
Multiple vulnerabilities have been discovered in Opera, allowing for execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.27 | >= 9.27 |
Opera is a fast web browser that is available free of charge.
Michal Zalewski reported two vulnerabilities, memory corruption when adding news feed sources from a website (CVE-2008-1761) as well as when processing HTML CANVAS elements to use scaled images (CVE-2008-1762). Additionally, an unspecified weakness related to keyboard handling of password inputs has been reported (CVE-2008-1764).
A remote attacker could entice a user to visit a specially crafted web site or news feed and possibly execute arbitrary code with the privileges of the user running Opera.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.27"
Multiple vulnerabilities have been discovered in Opera, allowing for file disclosure, privilege escalation and Cross-Site scripting.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.26 | >= 9.26 |
Opera is a fast web browser that is available free of charge.
Mozilla discovered that Opera does not handle input to file form fields properly, allowing scripts to manipulate the file path (CVE-2008-1080). Max Leonov found out that image comments might be treated as scripts, and run within the wrong security context (CVE-2008-1081). Arnaud reported that a wrong representation of DOM attribute values of imported XML documents allows them to bypass sanitization filters (CVE-2008-1082).
A remote attacker could entice a user to upload a file with a known path by entering text into a specially crafted form, to execute scripts outside intended security boundaries and conduct Cross-Site Scripting attacks.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.26"
Multiple vulnerabilities were discovered in Opera, allowing for the execution of arbitrary code and cross domain scripting.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.25 | >= 9.25 |
Opera is a fast Web browser that is available free of charge.
David Bloom reported two vulnerabilities where plug-ins (CVE-2007-6520) and Rich text editing (CVE-2007-6522) could be used to allow cross domain scripting. Alexander Klink (Cynops GmbH) discovered an issue with TLS certificates (CVE-2007-6521). Gynvael Coldwind reported that bitmaps might reveal random data from memory (CVE-2007-6524).
A remote attacker could exploit these vulnerabilities, possibly leading to the execution of arbitrary code and cross domain scripting.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.25"
Opera contains multiple vulnerabilities, which may allow the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.24 | >= 9.24 |
Opera is a multi-platform web browser.
Michael A. Puls II discovered an unspecified flaw when launching external email or newsgroup clients (CVE-2007-5541). David Bloom discovered that when displaying frames from different websites, the same-origin policy is not correctly enforced (CVE-2007-5540).
An attacker could potentially exploit the first vulnerability to execute arbitrary code with the privileges of the user running Opera by enticing a user to visit a specially crafted URL. Note that this vulnerability requires an external e-mail or newsgroup client configured in Opera to be exploitable. The second vulnerability allows an attacker to execute arbitrary script code in a user's browser session in context of other sites or the theft of browser credentials.
There is no known workaround at this time for all these vulnerabilities.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.24"
Opera contain several vulnerabilities, some of which may allow the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.23 | >= 9.23 |
Opera is a multi-platform web browser.
An error known as "a virtual function call on an invalid pointer" has been discovered in the JavaScript engine (CVE-2007-4367). Furthermore, iDefense Labs reported that an already-freed pointer may be still used under unspecified circumstances in the BitTorrent support (CVE-2007-3929). At last, minor other errors have been discovered, relative to memory read protection (Opera Advisory 861) and URI displays (CVE-2007-3142, CVE-2007-3819).
A remote attacker could trigger the BitTorrent vulnerability by enticing a user into starting a malicious BitTorrent download, and execute arbitrary code through unspecified vectors. Additionally, a specially crafted JavaScript may trigger the "virtual function" vulnerability. The JavaScript engine can also access previously freed but uncleaned memory. Finally, a user can be fooled with a too long HTTP server name that does not fit the dialog box, or a URI containing whitespaces.
There is no known workaround at this time for all these vulnerabilities.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.23"
Two vulnerabilities may allow the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.10 | >= 9.10 |
Opera is a multi-platform web browser.
Christoph Deal discovered that JPEG files with a specially crafted DHT marker can be exploited to cause a heap overflow. Furthermore, an anonymous person discovered that Opera does not correctly handle objects passed to the "createSVGTransformFromMatrix()" function.
An attacker could potentially exploit the vulnerabilities to execute arbitrary code with the privileges of the user running Opera by enticing a victim to open a specially crafted JPEG file or a website containing malicious JavaScript code.
The vendor recommends disabling JavaScript to avoid the "createSVGTransformFromMatrix" vulnerability. There is no known workaround for the other vulnerability.
All Opera users should update to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.10"
Opera fails to correctly verify certain signatures.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 9.02 | >= 9.02 |
Opera is a multi-platform web browser.
Opera makes use of OpenSSL, which fails to correctly verify PKCS #1 v1.5 RSA signatures signed by a key with exponent 3. Some CAs in Opera's list of trusted signers are using root certificates with exponent 3.
An attacker could forge certificates which will appear valid and signed by a trusted CA.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-9.02"
Opera contains an integer signedness error resulting in a buffer overflow which may allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 8.54 | >= 8.54 |
Opera is a multi-platform web browser.
SEC Consult has discovered a buffer overflow in the code processing style sheet attributes. It is caused by an integer signedness error in a length check followed by a call to a string function. It seems to be hard to exploit this buffer overflow to execute arbitrary code because of the very large amount memory that has to be copied.
A remote attacker can entice a user to visit a web page containing a specially crafted style sheet attribute that will crash the user's browser and maybe lead to the execution of arbitrary code.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-8.54"
Lack of URL validation in Opera command-line wrapper could be abused to execute arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 8.51 | >= 8.51 |
Opera is a multi-platform web browser.
Peter Zelezny discovered that the shell script used to launch Opera parses shell commands that are enclosed within backticks in the URL provided via the command line.
A remote attacker could exploit this vulnerability by enticing a user to follow a specially crafted URL from a tool that uses Opera to open URLs, resulting in the execution of arbitrary commands on the targeted machine.
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-8.51"
Opera is vulnerable to several vulnerabilities which could result in information disclosure and facilitate execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 7.54-r3 | >= 7.54-r3 |
Opera is a multi-platform web browser.
Opera contains several vulnerabilities:
An attacker could exploit these vulnerabilities to:
There is no known workaround at this time.
All Opera users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/opera-7.54-r3"
Several new vulnerabilities were found and fixed in Opera, including one allowing an attacker to read the local filesystem remotely.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | <= 7.53 | >= 7.54 |
Opera is a multi-platform web browser.
Multiple vulnerabilities have been found in the Opera web browser. Opera fails to deny write access to the "location" browser object. An attacker can overwrite methods in this object and gain script access to any page that uses one of these methods. Furthermore, access to file:// URLs is possible even from pages loaded using other protocols. Finally, spoofing a legitimate web page is still possible, despite the fixes announced in GLSA 200407-15.
By enticing an user to visit specially crafted web pages, an attacker can read files located on the victim's file system, read emails written or received by M2, Opera's mail program, steal cookies, spoof URLs, track user browsing history, etc.
There is no known workaround at this time. All users are encouraged to upgrade to the latest available version.
All Opera users should upgrade to the latest stable version:
# emerge sync # emerge -pv ">=www-client/opera-7.54" # emerge ">=www-client/opera-7.54"
Opera contains three vulnerabilities, allowing an attacker to impersonate legitimate websites with URI obfuscation or to spoof websites with frame injection.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | <= 7.52 | >= 7.53 |
Opera is a multi-platform web browser.
Opera fails to remove illegal characters from an URI of a link and to check that the target frame of a link belongs to the same website as the link. Opera also updates the address bar before loading a page. Additionally, Opera contains a certificate verification problem.
These vulnerabilities could allow an attacker to impersonate legitimate websites to steal sensitive information from users. This could be done by obfuscating the real URI of a link or by injecting a malicious frame into an arbitrary frame of another browser window.
There is no known workaround at this time. All users are encouraged to upgrade to the latest available version.
All Opera users should upgrade to the latest stable version:
# emerge sync # emerge -pv ">=www-client/opera-7.53" # emerge ">=www-client/opera-7.53"
A vulnerability exists in Opera's telnet URI handler that may allow a remote attacker to overwrite arbitrary files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | < 7.50_beta1 | >= 7.50_beta1 |
Opera is a multi-platform web browser.
The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able to pass options to the telnet program itself. One example would be the following:
telnet://-nMyFile
If MyFile exists in the user's home directory and the user clicking on the link has write permissions to it, the contents of the file will be overwritten with the output of the telnet trace information. If MyFile does not exist, the file will be created in the user's home directory.
This exploit has two possible impacts. First, it may create new files in the user's home directory. Second, and far more serious, it may overwrite existing files that the user has write permissions to. An attacker with some knowledge of a user's home directory might be able to destroy important files stored within.
Disable the telnet URI handler from within Opera.
All Opera users are encouraged to upgrade to the latest version of the program:
# emerge sync # emerge -pv ">=www-client/opera-7.50_beta1" # emerge ">=www-client/opera-7.50_beta1"
Buffer overflows exist in Opera 7.11 and 7.20 that can cause Opera to crash, and can potentially overwrite arbitrary bytes on the heap leading to a system compromise.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| www-client/opera | * | = 7.20, = 7.11 | >= 7.21 |
Opera is a multi-platform web browser.
The Opera browser can cause a buffer allocated on the heap to overflow under certain HREFs when rendering HTML. The mail system is also deemed vulnerable and an attacker can send an email containing a malformed HREF, or plant the malicious HREF on a web site.
Certain HREFs can cause a buffer allocated on the heap to overflow when rendering HTML which can allow arbitrary bytes on the heap to be overwritten which can result in a system compromise.
There is no known workaround at this time.
Users are encouraged to perform an 'emerge sync' and upgrade the package to the latest available version. Opera 7.22 is recommended as Opera 7.21 is vulnerable to other security flaws. Specific steps to upgrade:
# emerge sync # emerge -pv '>=www-client/opera-7.22' # emerge '>=www-client/opera-7.22' # emerge clean