Bug 3115

Summary:	Security update for opera
Product:	Mageia	Reporter:	Dave Hodgins <davidwhodgins>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	major
Priority:	Normal	CC:	anssi.hannula, sysadmin-bugs, tmb
Version:	1	Keywords:	validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	http://my.opera.com/desktopteam/blog/
Whiteboard:
Source RPM:	opera-11.51-1.mga1.nonfree.src.rpm	CVE:
Status comment:

Description Dave Hodgins 2011-10-19 21:24:17 CEST

This update fixes a vulnerability that was publicly disclosed
yesterday.
http://www.h-online.com/security/news/item/Critical-security-hole-in-current-version-of-Opera-1362504.html

Comment 1 Manuel Hiebel 2011-10-19 21:29:53 CEST

(Add the maintainer of opera)

Assignee: bugsquad => anssi.hannula

Comment 2 Dave Hodgins 2011-10-20 06:16:10 CEST

Testing on i586 complete for the srpm
opera-11.52-1.mga1.nonfree.src.rpm

Testing browsing, email, usenet, rss, flash at
http://www.adobe.com/software/flash/about/ and java at
http://java.com/en/download/testjava.jsp

Advisory:
This security update for opera closes a vulnerability in SVG font
handling, that can allow execution of arbitrary code.

CC: (none) => qa-bugs

Comment 3 claire robinson 2011-10-20 12:33:50 CEST

Is this ready for QA? It has not been assigned.

Comment 4 Manuel Hiebel 2011-10-20 12:43:38 CEST

I think yes, funda had push the package sine some hours: http://svnweb.mageia.org/packages?view=revision&revision=156744

Comment 5 claire robinson 2011-10-20 12:53:00 CEST

Assigning QA so it appears in the proper searches.

Assignee: anssi.hannula => qa-bugs

Comment 6 Anssi Hannula 2011-10-20 13:00:09 CEST

Reference for the advisory:
http://www.opera.com/support/kb/view/1002/

CC: (none) => anssi.hannula

Comment 7 claire robinson 2011-10-20 13:20:19 CEST

Tested OK x86_64

Advisory:
----------------
This security update for opera closes a vulnerability in SVG font
handling, that can allow execution of arbitrary code.

http://www.opera.com/support/kb/view/1002/
----------------

SRPM: opera-11.52-1.mga1.nonfree.src.rpm

Can sysadmin please push from nonfree/updates_testing to nonfree/updates

Thankyou!

Keywords: (none) => validated_update
CC: qa-bugs => sysadmin-bugs
Hardware: i586 => All
Severity: normal => major

Comment 8 Thomas Backlund 2011-10-20 15:54:26 CEST

Update pushed.

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED