Security

* Fixed an issue where specially crafted JPEG images ccould be used to execute arbitrary code, as reported by Tavis Ormandy of the Google Security Team; see our advisory

* Fixed an issue where plug-ins could be used to allow cross domain scripting, as reported by Adam Barth; details will be disclosed at a later date.

* Fixed a moderately severe issue; details will be disclosed at a later date.

* Added support for the following platform-specific features:

o DEP (Data Execution Prevention) in Microsoft WindowsXP® with Service Pack 2 and higher and Microsoft Windows Server 2003® with Service Pack 1
o ASLR (Address Space Layout Randomization) in Microsoft Windows Vista®

* Added Untrusted Rootstore Capability:

o Opera downloads only the detailed information about untrusted (blacklisted) certificates when they are encountered
o If download fails for certificate information in the list, Opera considers any certificate matching the ID as untrusted

* Added version conditional fetching of certificate dependencies from an online repository

* Fixed a problem downloading the CRL (Certificate Revocation List)

* Fixed a problem that could cause SSL to deadlock in one state, hanging the connection

* Fixed a problem that could cause the incorrect calculation of Certificate IDs

* Implemented Extended Validation (EV) for cross-signed EV Root Certificates not shipped by default

* Implemented preshipping of the Entrust 2048 CA (Certificate Authority)

* Implemented Root Certificate fetching from an online repository when an intermediate matches a certificate in the repository

* Improved support for weak encryption when importing .p12 private certificates

* Prevented security information documents from being written to disk

Miscellaneous

* Fixed a problem which created separate feed notifications; Opera now groups them together

* Fixed a problem with inline find when no content was entered and the Enter key was pressed

* Implemented opacity on text styled with hexidecimal color codes

* Installing an external source viewer no longer requires an Opera restart

* Installing Opera sets it as the default browser; this may be reset during the install process

• Opera 9.64 [Windows]
• Opera 9.64 [Linux]
• Opera 9.64 [Mac OS X]

• Opera 9.64 - Changelog
• Opera 9 Screenshots
• Opera 9 Features