From the opera advisory:
A bug in Opera's file download handling causes the download dialog to
give wrong information to the user when a data URL with an executable
file is loaded. In some cases, it will tell the user that the file will
be opened with NOTEPAD.EXE.[...] But when the user clicks "Open", the file
is executed.
see http://www.opera.com/support/search/supsearch.dml?index=784 for details
from ChangeLog:
Security
Restricted image size in address bar, page bar and page/window cycler. This
addresses issue reported in GreyMagic security advisory GM#007-OP: wide
favicons could cover URL in the address line.
Miscellaneous
- Various stability improvements
- Redirecting links correctly marked as visited
- Initial support for quoting selected text in messages
- Solved problem with duplicate addresses when using "Reply all"
from their ChangeLogs:
########
Addressing two issues reported by Jouko Pynnönen.
- Forced placement of downloaded skin-files in undesirable locations
- Buffer overflow when processing skins
Additionally, added an OpenSSL ASN.1 patch. (from OpenSSL 0.9.6k, November 4, 2003)
########
