OperaUSB

[MiDoJo]

And Again OperaUSB 9.52
Fixes this

Description: Opera Web Browser is a browser that runs on multiple

operating systems. Opera is exposed to multiple security issues. Opera

versions prior to 9.52 are affected.

[MiDoJo]

9.60 Fixes:

(2) CRITICAL: Opera Multiple Vulnerabilities

Affected:

Opera versions prior to 9.60

Description: Opera is a popular cross-platform web browser and suite of internet applications. It contains multiple vulnerabilities in its handling of addresses and Java applets. A specially crafted address used in a redirection can result in a buffer overflow vulnerability. Successfully exploiting this vulnerability would allow an attacker to execute arbitrary code with the privileges of the current user. Full technical details for this vulnerability are publicly available. Additionally, a flaw in the handling of Java applets can result in an information-disclosure vulnerability.

Status: Vendor confirmed, updates available.

References:

Matasano Advisory

http://www.matasano.com/log/1182/i-broke-opera/

Opera Security Advisories

http://www.opera.com/support/search/view/901/

http://www.opera.com/support/search/view/902/

Vendor Home Page

http://www.opera.com

SecurityFocus BIDs

http://www.securityfocus.com/bid/31643

http://www.securityfocus.com/bid/31631

[MiDoJo]

oops I missed posting the update to 9.61
.62 fixes

Opera 9.62 incorporates the Opera Presto 2.1.1 user agent engine.
Changes since Opera 9.61
Security
Fixed an issue where History Search could be used to execute arbitrary code, as discovered by Aviv Raff; see our advisory
The links panel no longer allows cross-site scripting; see our advisory

[ReadOnly]

http://opera-usb.com/download/operausb1150en.zip

[Wolfghost]

It's allready posted: http://www.portablefreeware.com/index.php?id=507

[ReadOnly]

OperaUSB v11.50 wasn't available on 6/30 when Opera 11.50 was posted here.

[ReadOnly]

http://opera-usb.com/download/operausb1164en.zip

From the Opera 11.64 changelog:

Stability improvements
Resolved a handshake failure on https://autoupdate.opera.com
Fixed an error where an on-demand-plugin placeholder could lower the security status of a secure site to insecure
Fixed an issue with some secure pages not loading - PayPal, Ebay
dojotoolkit.org: Errors when using the dojo amd loader have been resolved
rts.rs: A JavaScript error has been resolved
Fixed an issue where certain URL constructs could allow arbitrary code execution, as reported by Andrey Stroganov

[guinness]

It's already updated!

[ReadOnly]

It's already updated!

Opera@USB 11.64 was released today.

[JohnTHaller]

I think the confusion originated from the fact that Opera@USB is no longer the primary listing on PFC. Opera is because it includes a portable installer inside its standard installer. This was updated weeks ago, along with Opera Portable from PortableApps.com (which fixes things like portablizing settings paths, speeddial backgrounds, etc) which is also a secondary listing. Opera@USB doesn't appear to be maintained as well anymore, nor is it strictly necessary any longer as it is simply a zipped version of the standard Opera installed in portable mode.

[guinness]

Opera@USB 11.64 was released today.

I know, but Opera is the main product now not Opera@USB. Opera@USB is Opera extracted and then recompressed as a ZIP file, despite the fact there is no difference between using the 'official' Opera installer.