September 3rd, 2009
Opera browser (finally) gets an auto-updater
The Opera Web browser has undergone a minor security makeover with one significant improvement — the ability to update itself when patches are released.
The latest browser update will, by default, notify the user about available updates in very much the same way Mozilla Firefox handles automatic patching.
From the changelog:
Users can specify that snapshot build releases of Opera should be downloaded by enabling “Download All Snapshots” in opera:config. Users can also choose not to check for updates or to automatically install updates by going to Tools > Preferences > Advanced > Security and changing the “Opera update level” (select box) to the: “Automatically install updates” setting.
The latest Opera update also adds support for TLS 1.2, a full set of padlock icons for security dialog box, and a new feature to handle anti-spoof checking.
It also fixes the following security problems.
- Issue where sites using revoked intermediate certificates might be shown as secure; see advisory.
- Issue where the collapsed address bar didn’t show the current domain; see advisory.
- Some IDNA characters not correctly displaying in the address bar; see our advisory.
- Issue where Opera accepts nulls and invalid wildcards in certificates; see our advisory.
- Recognizing EV certificates issued directly from the Root.
Ryan Naraine is a journalist and security evangelist at Kaspersky Lab. He manages Threatpost.com, a security news portal. Here is Ryan's full profile and disclosure of his industry affiliations.
For daily updates on Ryan's activities, follow him on Twitter.
Subscribe to Zero Day via Email alerts or RSS.
