Описание
Security update for opera
This update for opera fixes the following issues:
-
Update to 112.0.5197.25
- CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127
-
The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293
-
Update to 112.0.5197.24
- CHR-9762 Update Chromium on desktop-stable-126-5197 to 126.0.6478.62
- DNA-117001 Crash at base::internal::check_is_test_impl (base::NotFatalUntil)
- DNA-117050 [Settings][Sync] Synchronization options aren't visible
- DNA-117076 [Player] Background of the icons has changed and the Tidal icon is now missing
- DNA-117109 Browser freezes when trying to remove a tab
- DNA-117181 Translations for O112
- DNA-117202 Crash at syncer::SyncServiceImpl::NotifyObservers()
- DNA-117295 Remove emoji names field in picker
- DNA-117347 Start page is not rendered on first switch to workspace after its creation
- DNA-117431 Promote 112 to stable
-
Complete Opera 112 changelog at: https://blogs.opera.com/desktop/changelog-for-112
-
The update to chromium >= 126.0.6478.54 fixes following issues: CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, CVE-2024-5847
-
Update to 111.0.5168.55
- DNA-116749 Unnecessary icons in the advanced sync settings
- DNA-116961 Evaluate #vtvd-as-platform-sw-decoder in the field
- DNA-117003 #vtvd-as-platform-sw-decoder is not registered in media unittests
Список пакетов
openSUSE Leap 15.5 NonFree
Ссылки
- E-Mail link for openSUSE-SU-2024:0205-1
- SUSE Security Ratings
- SUSE CVE CVE-2024-5830 page
- SUSE CVE CVE-2024-5831 page
- SUSE CVE CVE-2024-5832 page
- SUSE CVE CVE-2024-5833 page
- SUSE CVE CVE-2024-5834 page
- SUSE CVE CVE-2024-5835 page
- SUSE CVE CVE-2024-5836 page
- SUSE CVE CVE-2024-5837 page
- SUSE CVE CVE-2024-5838 page
- SUSE CVE CVE-2024-5839 page
- SUSE CVE CVE-2024-5840 page
- SUSE CVE CVE-2024-5841 page
- SUSE CVE CVE-2024-5842 page
- SUSE CVE CVE-2024-5843 page
- SUSE CVE CVE-2024-5844 page
- SUSE CVE CVE-2024-5845 page
- SUSE CVE CVE-2024-5846 page
- SUSE CVE CVE-2024-5847 page
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5830
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5831
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5832
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5833
- SUSE Bug 1226205
Описание
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5834
- SUSE Bug 1226205
Описание
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5835
- SUSE Bug 1226205
Описание
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5836
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5837
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5838
- SUSE Bug 1226205
Описание
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5839
- SUSE Bug 1226205
Описание
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5840
- SUSE Bug 1226205
Описание
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5841
- SUSE Bug 1226205
Описание
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5842
- SUSE Bug 1226205
Описание
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5843
- SUSE Bug 1226205
Описание
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5844
- SUSE Bug 1226205
Описание
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5845
- SUSE Bug 1226205
Описание
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5846
- SUSE Bug 1226205
Описание
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5847
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6290
- SUSE Bug 1226933
Описание
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6291
- SUSE Bug 1226933
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6292
- SUSE Bug 1226933
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6293
- SUSE Bug 1226933