9.26 - coming soon!
By Claudio Santambrogiocsant. Thursday, February 14, 2008 3:51:44 PM
We are also addressing a few security issues; details will be published in due time.
Mozilla notified us of one security issue (
) the day before they published their public advisory (
). They did not wait for us to come back with an ETA for a fix: they kept their bug reports containing the details of the exploits closed to the public for a few days, and now opened most of them to everybody (
).Opera is as always committed to not only protecting its users, but to making the Web a safe place. We believe in responsible disclosure of vulnerabilities affecting several vendors.
Download



1 2 3 Next »
Tamil # Thursday, February 14, 2008 4:17:15 PM
Martin RauscherHades32 # Thursday, February 14, 2008 4:20:34 PM
MyOpera team, please fix this!fearphage # Thursday, February 14, 2008 4:23:18 PM
Originally posted by Hades32:
I agree in some instances *cough* bts *cough*Tim AltmanJunyor # Thursday, February 14, 2008 4:36:03 PM
* Problems starting Opera or saving bookmarks/notes if you're using Leopard and FileVault
* Stability issues with plug-ins
Uwe aka JaDaJada0007 # Thursday, February 14, 2008 4:41:15 PM
Flash 9.0.115?
and this?
Tim AltmanJunyor # Thursday, February 14, 2008 4:42:53 PM
v-love # Thursday, February 14, 2008 5:02:04 PM
GediminasGedis # Thursday, February 14, 2008 5:10:36 PM
GwenDragon # Thursday, February 14, 2008 5:34:09 PM
Visit http://www.microsoft.com/silverlight/getassistance.aspx
KujaIXKuja-IX # Thursday, February 14, 2008 5:52:18 PM
nemonemoxx # Thursday, February 14, 2008 5:54:08 PM
Tim AltmanJunyor # Thursday, February 14, 2008 6:13:10 PM
Arthur WilkinsonGT500 # Thursday, February 14, 2008 6:18:23 PM
Of course, considering that there are active exploits for Firefox, it's safe to say that the malware authors already knew about this security vulnerability.
Łukasz Janiklukjan # Thursday, February 14, 2008 6:43:15 PM
Uncle MickMickeyjoe-Irl # Thursday, February 14, 2008 6:54:32 PM
Charlescalande # Thursday, February 14, 2008 7:10:52 PM
Шуйский Николай [krigstask, Ŝtérkrìg]Sterkrig # Thursday, February 14, 2008 7:11:46 PM
KurtChrisDavey # Thursday, February 14, 2008 7:16:45 PM
Andrew RichAndrewRich # Thursday, February 14, 2008 7:22:09 PM
MarcinNetJaro # Thursday, February 14, 2008 7:55:50 PM
http://taat.pl/typografia/eksperymenty/ilu/ - bad. (Select all text, It is obliged to appear heart)
wile-e-wonka # Thursday, February 14, 2008 8:02:19 PM
Tri M. NguyenTriMN # Thursday, February 14, 2008 8:09:38 PM
Anthony Garneragarner # Thursday, February 14, 2008 8:16:03 PM
Upon startup, I get the following message:
Not possible to run old Opera version with new Opera mail files. Acct Manager Init failed. Engine Init() failed.
I did the upgrade option, as opposed to the new install option.
Windows XP SP2.
Claudio Santambrogiocsant # Thursday, February 14, 2008 8:24:32 PM
Originally posted by agarner:
Hmm, you didn't install over a 9.5 installation, did you?
Anthony Garneragarner # Thursday, February 14, 2008 8:27:22 PM
Øyvind ØstlundNoteMe # Thursday, February 14, 2008 8:29:45 PM
It is the Kestrel builds that does 60+ points. Opera 9.25 did 46 as well.
- ØØ -
Tim AltmanJunyor # Thursday, February 14, 2008 8:36:34 PM
LaliLali19871014 # Thursday, February 14, 2008 8:42:49 PM
Tri M. NguyenTriMN # Thursday, February 14, 2008 8:57:35 PM
Stifu # Thursday, February 14, 2008 9:17:16 PM
Or maybe they simply maliciously did that in order to put Opera in a bad spot... but so what?
It's nice of them to take the time to point out something to Opera (which is basically both an ally and a competitor to them) for nothing in return, especially since Opera's security is based on obscurity.
(And how often does Microsoft help you?)
Don't get me wrong, I still like Opera very much. But this is just an article that calls for stupid Mozilla bashing.
nemonemoxx # Thursday, February 14, 2008 9:36:55 PM
JoeGoJoeGo # Thursday, February 14, 2008 9:41:35 PM
Mozilla has been bashing Opera in the past and pretending that they are so incredibly awesome at handling security. After a number of FUD articles from Mozilla, I think Opera is allowed to tell its users when Mozilla don't practice what they preach, to the detriment of other browser vendors.
Rijk # Thursday, February 14, 2008 9:47:16 PM
Originally posted by Stifu:
You are missing some background information it seems. It is Mozilla who has been telling everyone that they are good at 'responsible disclosure', and telling us we should share issues we find. And yes, when MSIE engineers find an issue that is applicable to other browsers, they inform us. This has actually happened.I-Beam # Thursday, February 14, 2008 10:10:03 PM
This comment needs a reply. Opera has always shown a commitment to providing a secure browsing experience. I have used Opera for years, and one of the main reasons is their responsiveness to security issues. (Okay, the main reason overall is mouse gestures, but I did use the browser before those came along.)
From my perspective as a user, Opera's security is based on Opera considering safety as an integral part of the browser, implementing that during design and coding, and fixing any security problems as quickly as possible when they do arise, no matter how small the problems may be.
naphil-removed # Thursday, February 14, 2008 10:19:44 PM
Nevertheless the didn't discover that exploit I wonder why the Security researchers didn't test those against Opera too.
Do they work for Mozilla?
Anyway I always regarded highly Opera ASA for they standards compliance. All the time I looked into an issue I found out that other user agents were relying on some quirks.
All the times I got the feeling that Opera ASA cares much more for interoperability than other "brands" and their uncompetitive ways.
Opera is my 1st choice browser.
If you only could extend the widget standard to merge seamlessly into Opera user interface I couldn't be happier.
Stifu # Thursday, February 14, 2008 10:28:53 PM
As for Microsoft helping you, color me surprised (not sure what they have to gain). On the other hand, it sounds like it only happened once last year, while it seems to me like Mozilla was more helpful (jsfunfuzz tool comes to mind...).
I-Beam: I'm not saying Opera is not secure... but on the other hand, it can't really be compared to other browsers on that point. It can't be compared to Firefox, as Firefox is opensource, making it so issues can be spotted much more easily. It can't be compared to IE either, as IE has hundreds of times more users, making flaws much more discoverable, but also much more interesting to find, from a hacker point of view. (Yet, I don't think IE is more secure than Opera, no
And to add something about the obscurity comment, the closed bug-tracking system certainly doesn't help making me think otherwise. I see that as a real drawback for Opera, as I have often wanted to edit/add more info about bug reports I made, but couldn't as you can't view them once submitted... Opera's loss.
topplehat # Thursday, February 14, 2008 11:06:56 PM
Corros # Thursday, February 14, 2008 11:12:35 PM
rwf # Thursday, February 14, 2008 11:20:02 PM
Originally posted by Stifu:
I just send additional info / more crash logs to the e-mail address I get when I submit a bug-report. God only knows if they read them, but the e-mail doesn't get bounced.
Kelson VibberKelson # Thursday, February 14, 2008 11:21:10 PM
"Hey, we ran into some interesting issues with our browser. You might want to check yours and see if they apply."
"While testing our upcoming bugfix release yesterday, someone decided to see if any of the vulnerabilities worked on Opera, and this set does."
"We've been working on fixing these vulnerabilities for the past two months, and we're releasing the update tomorrow. And we've known you're vulnerable for the past month, but haven't bothered to tell you."
These are all very different scenarios.
topplehat # Thursday, February 14, 2008 11:31:59 PM
mike henslerdamncrackmonkey # Thursday, February 14, 2008 11:54:18 PM
Perhaps this was a mistake on their part to not give advance notice to other browsers. However, seeing as Firefox is open source, don't they effectively have to disclose vulnerabilities to the public in order to get a fix?
Milošmilos.lazic # Friday, February 15, 2008 12:03:55 AM
Uwe aka JaDaJada0007 # Friday, February 15, 2008 3:04:08 AM
Junyor, the bugs are not fixed
why you don't say just No
so go fix it right now
JaDa
Kamaleshkamalesh # Friday, February 15, 2008 7:17:47 AM
Joachim Blaabjergblaabjerg # Friday, February 15, 2008 9:17:49 AM
ossi81 # Friday, February 15, 2008 11:18:12 AM
Stifu # Friday, February 15, 2008 12:21:02 PM
Originally posted by rwf:
I don't remember the bug numbers, though... I just don't note them down or bookmark them. Is there a way to find them back?
Hypezor # Friday, February 15, 2008 12:46:22 PM
VladTuPLaD # Friday, February 15, 2008 12:56:41 PM