Thanks to a couple readers that wrote in this morning, we were notified about Opera 9.20 for all platforms.

A cut and paste of the "Security" section says:

Security

• Fix for character encoding inheritance issue with frames, which could enable cross-site scripting. See the advisory.
• Fixed an issue regarding handling of FTP PASV response, as reported by Mark at bindshell.net
• XMLHttpRequest now treats separate ports on the same server as a different server. Issue reported by Egmont Koblinger.
• Fixed an issue where scripts could continue to run after leaving the page, as reported by Herrmann Manuel.
• Skandiabanken.no's message about successful certificate installation is now shown.

So, if you are out there running Opera.  Time to upgrade!  /me goes off to upgrade my own.


Joel Esler
Handler of the Day
http://handlers.sans.org/jesler