Author Topic: Vulnerability In Opera  (Read 5639 times)

dsavard

  • Jr. Member
  • **
  • Posts: 74
    • View Profile
    • http://
Vulnerability In Opera
« on: December 08, 2004, 11:22:28 pm »
Secunia has reported a vulnerability which affect all web browsers, including Opera. There is also a story on /.

I checked and this vulnerability exists on the Opera version shipped with the Z6K (7.25). It seems latest version of Opera is not vulnerable (7.54).

Anybidy knows how Opera can be upgraded on the Zaurus and if there is a cost?
JID: AchilleTalon-myjabber.net[/font]
___________________________________
Zaurus SL-6000L
HAiCOM HI-303 MMF CF GPS Receiver
Targus Universal Wireless Keyboard
Verbatim SD 64 MB
Lexar 32x 1GB SD
Lexar 4x 1GB CF
Sharp CE-170TS Serial cable
___________________________________

Jcroto1

  • Jr. Member
  • **
  • Posts: 95
    • View Profile
    • http://
Vulnerability In Opera
« Reply #1 on: December 09, 2004, 05:01:21 pm »
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
SL-5500 - OZ 3.5.2  Opie
SL-6000L - ?
128 mb Viking CF
256 mb Kingston SD
512 mb Sandisk Ultra II SD
Linksys WCF12 Wireless card

maslovsky

  • Hero Member
  • *****
  • Posts: 1426
    • View Profile
    • http://my-zaurus.narod.ru
Vulnerability In Opera
« Reply #2 on: December 22, 2004, 03:22:37 am »
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
No, it's not.

Jcroto1

  • Jr. Member
  • **
  • Posts: 95
    • View Profile
    • http://
Vulnerability In Opera
« Reply #3 on: December 22, 2004, 01:26:52 pm »
Quote
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
No, it's not.
Yes, it's in the /home/zaurus/.opera directory (if you were to extract it) and it's called "opera_arm.ipk"
[span style=\'font-size:8pt;line-height:100%\']look in the postinst[/span]
« Last Edit: December 22, 2004, 01:30:49 pm by Jcroto1 »
SL-5500 - OZ 3.5.2  Opie
SL-6000L - ?
128 mb Viking CF
256 mb Kingston SD
512 mb Sandisk Ultra II SD
Linksys WCF12 Wireless card

Greg2

  • Hero Member
  • *****
  • Posts: 790
    • View Profile
    • http://
Vulnerability In Opera
« Reply #4 on: December 24, 2004, 11:20:45 am »
Quote
Quote
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
No, it's not.
Yes, it's in the /home/zaurus/.opera directory (if you were to extract it) and it's called "opera_arm.ipk"
[span style=\'font-size:8pt;line-height:100%\']look in the postinst[/span]
I'm in the process of repackaging this for my 5500 and 5600 with oz3.5.2 and this is the control file from the opera.ipk in the multimodal_arm.ipk:

Package: opera
Version: 7.55.6079
Architecture: arm
Maintainer: Stein Kulseth <steink@opera.com>
Priority: optional
Section: web
Description: The Opera Web Browser
 Welcome to the Opera Web browser. It is smaller, faster,
 customizable, powerful, yet user-friendly. Opera eliminates
 sluggish performance, HTML standard violations, desktop
 domination, and instability. This robust Web browser lets you
 navigate the Web at incredible speed and offers you the best
 Internet experience.

With a little effort this should work on a 6000?

Greg

Jcroto1

  • Jr. Member
  • **
  • Posts: 95
    • View Profile
    • http://
Vulnerability In Opera
« Reply #5 on: December 24, 2004, 03:57:47 pm »
It should work with no effort.  When you download it it says it's for the 5600 and 6000.  So hopefully eveything will work without tweaking.
SL-5500 - OZ 3.5.2  Opie
SL-6000L - ?
128 mb Viking CF
256 mb Kingston SD
512 mb Sandisk Ultra II SD
Linksys WCF12 Wireless card

maslovsky

  • Hero Member
  • *****
  • Posts: 1426
    • View Profile
    • http://my-zaurus.narod.ru
Vulnerability In Opera
« Reply #6 on: December 24, 2004, 04:07:33 pm »
Quote
Quote
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
No, it's not.
Yes, it's in the /home/zaurus/.opera directory (if you were to extract it) and it's called "opera_arm.ipk"
[span style=\'font-size:8pt;line-height:100%\']look in the postinst[/span]
What I mean is that Opera is there in the package but that version is still affected by the vulnerability...

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Vulnerability In Opera
« Reply #7 on: January 01, 2005, 03:31:52 pm »
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
I registered, downloaded & extracted & installed the opera_arm.ipk, and ipkg shows it's installed, but there's still no application icon, even after a reboot. Anybody know what else I need to do? thks
GROG!

JohnKiniston

  • Full Member
  • ***
  • Posts: 213
    • View Profile
    • http://
Vulnerability In Opera
« Reply #8 on: January 01, 2005, 04:12:41 pm »
Quote
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
I registered, downloaded & extracted & installed the opera_arm.ipk, and ipkg shows it's installed, but there's still no application icon, even after a reboot. Anybody know what else I need to do? thks
Which rom are you using?

Did you use ipkg-link to link it to root if you installed it on SD or CF?

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Vulnerability In Opera
« Reply #9 on: January 02, 2005, 12:05:48 pm »
Quote
Quote
Quote
Opera 7.55 is burried in the WebSphere Everyplace Multimodal Environment package.  It's free but you have to register first.

http://www14.software.ibm.com/webapp/downl...p?go=y&rs=wsmee

Hope it has the patch.
I registered, downloaded & extracted & installed the opera_arm.ipk, and ipkg shows it's installed, but there's still no application icon, even after a reboot. Anybody know what else I need to do? thks
Which rom are you using?

Did you use ipkg-link to link it to root if you installed it on SD or CF?
I installed to my internal memory not to a card, so I'm assuming that ipkg-link isn't required? As for what ROM, it's OPIE-OZ 3.5.2 - I've seen discussions of other 'types', but how can I tell which one I'm using? And where to I get the different types? There was only the one set
here.
GROG!

Jcroto1

  • Jr. Member
  • **
  • Posts: 95
    • View Profile
    • http://
Vulnerability In Opera
« Reply #10 on: January 02, 2005, 12:48:22 pm »
Quote
What I mean is that Opera is there in the package but that version is still affected by the vulnerability...
Ahh.  Ok.  It makes sense.
SL-5500 - OZ 3.5.2  Opie
SL-6000L - ?
128 mb Viking CF
256 mb Kingston SD
512 mb Sandisk Ultra II SD
Linksys WCF12 Wireless card

Jcroto1

  • Jr. Member
  • **
  • Posts: 95
    • View Profile
    • http://
Vulnerability In Opera
« Reply #11 on: January 02, 2005, 12:56:49 pm »
grog,

This Opera installs all the packages to /home/QtPalmtop/bin but OZ looks in the /opt/QtPalmtop/bin.  You have to symlink it all by hand,
Code: [Select]
ln -s /home/QtPalmtop/bin/opera /opt/QtPalmtop/bin/opera
ln -s ...

PS  I found this version to be very unstable which I just wanted to tell you before you spent the time fixing it

Have fun!!
SL-5500 - OZ 3.5.2  Opie
SL-6000L - ?
128 mb Viking CF
256 mb Kingston SD
512 mb Sandisk Ultra II SD
Linksys WCF12 Wireless card

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Vulnerability In Opera
« Reply #12 on: January 03, 2005, 08:44:32 pm »
Quote
PS  I found this version to be very unstable which I just wanted to tell you before you spent the time fixing it
Thanks for the tip. So what is the best *STABLE* version of opera then? 6 or 7.3 seem to be the other two available AFAIK. thks
GROG!

JohnKiniston

  • Full Member
  • ***
  • Posts: 213
    • View Profile
    • http://
Vulnerability In Opera
« Reply #13 on: January 03, 2005, 11:34:59 pm »
Quote
Quote
PS  I found this version to be very unstable which I just wanted to tell you before you spent the time fixing it
Thanks for the tip. So what is the best *STABLE* version of opera then? 6 or 7.3 seem to be the other two available AFAIK. thks
6 seems to be the best version under OpenZaurus 3.5.2 from my experience.

7.x seemed slower and crashed a lot more often.

I still have problems with 6 loading blank pages at times.

grog

  • Hero Member
  • *****
  • Posts: 692
    • View Profile
    • http://
Vulnerability In Opera
« Reply #14 on: January 04, 2005, 06:22:41 am »
Quote
6 seems to be the best version under OpenZaurus 3.5.2 from my experience.

7.x seemed slower and crashed a lot more often.

I still have problems with 6 loading blank pages at times.
I've noticed that with 7.3 too. I'm going to try going back to 6 for a while & see if that's better for me. I don't know what's supposed to make 7.X worth while, but for my simple needs I doubt I'll be missing anything :?).

thanks again
GROG!