Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0949-1

Опубликовано: 01 июл. 2021
Источник: suse-cvrf

Описание

Security update for opera

This update for opera fixes the following issues:

Update to version 77.0.4054.146

  • CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114
  • DNA-92171 Create active linkdiscovery service
  • DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiAsWorkspaceIcon when possible
  • DNA-93101 Tabs are being snoozed when tab snoozing is disabled
  • DNA-93386 Update pinboard view when item changes
  • DNA-93448 Make browser ready for Developer release
  • DNA-93491 Fix failing tests after enabling #pinboard flag
  • DNA-93498 Add additional music services
  • DNA-93503 Blank popup on clicking toolbar icon with popup open
  • DNA-93561 Do not allow zoom different from 100% in Pinboard popup
  • DNA-93637 ctrl+9 shortcut is inconsistent with other browsers
  • DNA-93644 Create route for import open tabs to pinboard
  • DNA-93664 Adapt popup to design
  • DNA-93702 Turn on flags on developer
  • DNA-93737 [Pinboard] Remove Mock API
  • DNA-93745 Unable to open the popup after opening it several times
  • DNA-93776 Popup closes and reopens when clicking the toolbar button
  • DNA-93786 DCHECK after opening popup
  • DNA-93802 Crash at views::Widget::GetNativeView() const
  • DNA-93810 Add pinboard icon to sidebar
  • DNA-93825 Add pinboard to Opera menu
  • DNA-93833 [Player] Implement seeking for new services
  • DNA-93845 Do not log output of snapcraft on console
  • DNA-93864 Create feature flag for start page sync banner
  • DNA-93865 Implement start page banner
  • DNA-93867 Use version from package instead of repository
  • DNA-93878 [Player] Crash when current player service becomes unavailable when user location changes
  • DNA-93953 ‘Send image to Pinboard’ has the wrong position in the context menu
  • DNA-93987 Disable zooming popup contents like in other popups
  • DNA-93989 Change internal URL to opera://pinboards
  • DNA-93990 Update strings to reflect new standards
  • DNA-93992 Add Pinboards to Opera settings
  • DNA-93993 Pinboard translations from Master
  • DNA-94011 Enable feature flags for Reborn 5 on stable
  • DNA-94019 Add a direct link to settings
  • DNA-94088 Internal pages provoke not saving other pages to the Pinboard
  • DNA-94111 [O77] Sidebar setup does not open
  • DNA-94139 Crash at opera::(anonymous namespace)::PinboardPopupWebView::RemovedFromWidget()
  • The update to chromium 91.0.4472.114 fixes following issues: CVE-2021-30554, CVE-2021-30555, CVE-2021-30556, CVE-2021-30557, CVE-2021-30544, CVE-2021-30545, CVE-2021-30546, CVE-2021-30547, CVE-2021-30548, CVE-2021-30549, CVE-2021-30550, CVE-2021-30551, CVE-2021-30552, CVE-2021-30553

Список пакетов

openSUSE Leap 15.2 NonFree
opera-77.0.4054.146-lp152.2.52.1

Описание

Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and user gesture.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки

Описание

Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Затронутые продукты
openSUSE Leap 15.2 NonFree:opera-77.0.4054.146-lp152.2.52.1

Ссылки
Уязвимость openSUSE-SU-2021:0949-1