<?xml version="1.0" encoding="UTF-8"?>
<updates xmlns="http://novell.com/package/metadata/suse/updateinfo">
<!--PATCHINFO id="55bf85f01cfa819337a5ac07ceb6416e"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2681">
  <id>opera</id>
  <title>opera: cross-origin loading of CSS stylesheets</title>
  <release>openSUSE 11.3</release>
  <issued date="1278633364"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=583620" id="583620" title="bug number 583620" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=607823" id="607823" title="bug number 607823" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=615942" id="615942" title="bug number 615942" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0653" id="CVE-2010-0653" title="CVE-2010-0653" type="cve"/>
  </references>
  <description>Opera was upgraded to the 10.60 release.

It brings lots of new features, bugfixes and security fixes.

Security fixes include: CVE-2010-0653: Opera permits
cross-origin loading of CSS style sheets even when the
style sheet download has an incorrect MIME type and the
style sheet document is malformed, which allows remote HTTP
servers to obtain sensitive information via a crafted
document.

CVE-2010-1993: Opera 9.52 does not properly handle an
IFRAME element with a mailto: URL in its SRC attribute,
which allows remote attackers to cause a denial of service
(resource consumption) via an HTML document with many
IFRAME elements.
</description>
  <pkglist>
    <collection>
        <package name="opera" arch="i586" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.i586.rpm</filename>
        </package>
        <package name="opera" arch="x86_64" version="10.60" release="0.1.1">
          <filename>opera-10.60-0.1.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
</updates>
