openSUSE-SU-2021:1433-1

Опубликовано: 01 нояб. 2021

Источник: suse-cvrf

Описание

Security update for opera

This update for opera fixes the following issues:

Opera was updated to version 80.0.4170.63

CHR-8612 Update chromium on desktop-stable-94-4170 to 94.0.4606.81
DNA-95434 Crash at opera::ThemesService::UpdateCurrentTheme()
The update to chromium 94.0.4606.81 fixes following issues: CVE-2021-37977, CVE-2021-37978, CVE-2021-37979, CVE-2021-37980

Opera was updated to version 80.0.4170.40

CHR-8598 Update chromium on desktop-stable-94-4170 to 94.0.4606.71
DNA-95221 Emoji button stuck in address bar
DNA-95325 Make y.at navigations to be reported with page_views events
DNA-95327 Add “Emojis” context menu option in address bar field
DNA-95339 Add YAT emoji url suggestion to search© dialog
DNA-95416 Remove emoji button from address bar
DNA-95439 Enable #yat-emoji-addresses on developer stream
DNA-95441 [Mac big sur] Emoji are not shown in address bar url
DNA-95514 Crash at resource_coordinator::TabLifecycleUnitSource ::TabLifecycleUnit::OnLifecycleUnitStateChanged(mojom:: LifecycleUnitState, mojom::LifecycleUnitStateChangeReason)
DNA-95746 Enable #reader-mode everywhere
DNA-95865 Numbers are recognized as emojis
DNA-95866 Change Yat text in selection popup
DNA-95867 Show that buttons are clickable in selection popup
The update to chromium 94.0.4606.71 fixes following issues: CVE-2021-37974, CVE-2021-37975, CVE-2021-37976

Список пакетов

openSUSE Leap 15.2 NonFree

opera-80.0.4170.63-lp152.2.73.1

Ссылки

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2JKY4BZIJEZDOAALSG7OM4W3NORVRUO4/
E-Mail link for openSUSE-SU-2021:1433-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://www.suse.com/security/cve/CVE-2021-37974/
SUSE CVE CVE-2021-37974 page
https://www.suse.com/security/cve/CVE-2021-37975/
SUSE CVE CVE-2021-37975 page
https://www.suse.com/security/cve/CVE-2021-37976/
SUSE CVE CVE-2021-37976 page
https://www.suse.com/security/cve/CVE-2021-37977/
SUSE CVE CVE-2021-37977 page
https://www.suse.com/security/cve/CVE-2021-37978/
SUSE CVE CVE-2021-37978 page
https://www.suse.com/security/cve/CVE-2021-37979/
SUSE CVE CVE-2021-37979 page
https://www.suse.com/security/cve/CVE-2021-37980/
SUSE CVE CVE-2021-37980 page

Описание

Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.