openSUSE: 2013:0129-1 Important: Opera CORS and Code Execution Risk

Fixed security issues:

-an issue that could cause Opera not to correctly check for

certificate revocation;

-an issue where CORS requests could incorrectly retrieve

contents of cross origin pages;

-an issue where data URIs could be used to facilitate

Cross-Site Scripting;

-a high severity issue, as reported by Gareth Heyes;

details will be disclosed at a later date

-an issue where specially crafted SVG images could allow

execution of arbitrary code;

-a moderate severity issue, as reported by the Google

Security Group; details will be disclosed at a later date

Full changelog available at:

https://help.opera.com/en/latest/