Описание
Security update for opera
This update for opera fixes the following issues:
-
Update to 112.0.5197.25
- CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127
-
The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CVE-2024-6293
-
Update to 112.0.5197.24
- CHR-9762 Update Chromium on desktop-stable-126-5197 to 126.0.6478.62
- DNA-117001 Crash at base::internal::check_is_test_impl (base::NotFatalUntil)
- DNA-117050 [Settings][Sync] Synchronization options aren't visible
- DNA-117076 [Player] Background of the icons has changed and the Tidal icon is now missing
- DNA-117109 Browser freezes when trying to remove a tab
- DNA-117181 Translations for O112
- DNA-117202 Crash at syncer::SyncServiceImpl::NotifyObservers()
- DNA-117295 Remove emoji names field in picker
- DNA-117347 Start page is not rendered on first switch to workspace after its creation
- DNA-117431 Promote 112 to stable
-
Complete Opera 112 changelog at: https://blogs.opera.com/desktop/changelog-for-112
-
The update to chromium >= 126.0.6478.54 fixes following issues: CVE-2024-5830, CVE-2024-5831, CVE-2024-5832, CVE-2024-5833, CVE-2024-5834, CVE-2024-5835, CVE-2024-5836, CVE-2024-5837, CVE-2024-5838, CVE-2024-5839, CVE-2024-5840, CVE-2024-5841, CVE-2024-5842, CVE-2024-5843, CVE-2024-5844, CVE-2024-5845, CVE-2024-5846, CVE-2024-5847
-
Update to 111.0.5168.55
- DNA-116749 Unnecessary icons in the advanced sync settings
- DNA-116961 Evaluate #vtvd-as-platform-sw-decoder in the field
- DNA-117003 #vtvd-as-platform-sw-decoder is not registered in media unittests
Update to 111.0.5168.43
- DNA-115228 Adblocker is blocking ads when turned off
- DNA-116605 Crash at opera::BrowserContentsView:: NonClientHitTestPoint(gfx::Point const&)
- DNA-116855 Cannot close tab island’s tab when popup was hovered
- DNA-116885 Add chrome.cookies api permission to Rich Hints
- DNA-116948 [Linux] Theme toggle in settings is not working
Update to 111.0.5168.25
- CHR-9754 Update Chromium on desktop-stable-125-5168 to 125.0.6422.142
- DNA-116089 [Win/Lin] Fullscreen view has rounded corners
- DNA-116208 The red dot on the Aria’s icon is misaligned
- DNA-116693 X (twitter) logo is not available on opera:about page
- DNA-116737 [Bookmarks] Bookmarks bar favicon have light theme color in new window
- DNA-116769 Extension popup – pin icon is replaced
- DNA-116850 Fix full package installer link
- DNA-116852 Promote 111 to stable
- DNA-116491 Site info popup is cut with dropdown opened
- DNA-116661 [opera:settings] IPFS/IPNS Gateway box has the wrong design
- DNA-116789 Translations for O111
- DNA-116813 [React emoji picker] Flag emojis are not load correctly
- DNA-116893 Put 'Show emojis in tab tooltip' in Settings
- DNA-116918 Translations for 'Show emojis in tab tooltip'
-
Complete Opera 111 changelog at: https://blogs.opera.com/desktop/changelog-for-111
-
The update to chromium 125.0.6422.142 fixes following issues: CVE-2024-5493, CVE-2024-5494, CVE-2024-5495, CVE-2024-5496, CVE-2024-5497, CVE-2024-5498, CVE-2024-5499
Список пакетов
openSUSE Leap 15.6 NonFree
Ссылки
- E-Mail link for openSUSE-SU-2024:0223-1
- SUSE Security Ratings
- SUSE CVE CVE-2024-5493 page
- SUSE CVE CVE-2024-5494 page
- SUSE CVE CVE-2024-5495 page
- SUSE CVE CVE-2024-5496 page
- SUSE CVE CVE-2024-5497 page
- SUSE CVE CVE-2024-5498 page
- SUSE CVE CVE-2024-5499 page
- SUSE CVE CVE-2024-5830 page
- SUSE CVE CVE-2024-5831 page
- SUSE CVE CVE-2024-5832 page
- SUSE CVE CVE-2024-5833 page
- SUSE CVE CVE-2024-5834 page
- SUSE CVE CVE-2024-5835 page
- SUSE CVE CVE-2024-5836 page
- SUSE CVE CVE-2024-5837 page
- SUSE CVE CVE-2024-5838 page
- SUSE CVE CVE-2024-5839 page
- SUSE CVE CVE-2024-5840 page
Описание
Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5493
- SUSE Bug 1225690
Описание
Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5494
- SUSE Bug 1225690
Описание
Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5495
- SUSE Bug 1225690
Описание
Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5496
- SUSE Bug 1225690
Описание
Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5497
- SUSE Bug 1225690
Описание
Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5498
- SUSE Bug 1225690
Описание
Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5499
- SUSE Bug 1225690
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5830
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5831
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5832
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5833
- SUSE Bug 1226205
Описание
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5834
- SUSE Bug 1226205
Описание
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5835
- SUSE Bug 1226205
Описание
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5836
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5837
- SUSE Bug 1226205
Описание
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-5838
- SUSE Bug 1226205
Описание
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5839
- SUSE Bug 1226205
Описание
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5840
- SUSE Bug 1226205
Описание
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5841
- SUSE Bug 1226205
Описание
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5842
- SUSE Bug 1226205
Описание
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5843
- SUSE Bug 1226205
Описание
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5844
- SUSE Bug 1226205
Описание
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5845
- SUSE Bug 1226205
Описание
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5846
- SUSE Bug 1226205
Описание
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
Затронутые продукты
Ссылки
- CVE-2024-5847
- SUSE Bug 1226205
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6290
- SUSE Bug 1226933
Описание
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6291
- SUSE Bug 1226933
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6292
- SUSE Bug 1226933
Описание
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Затронутые продукты
Ссылки
- CVE-2024-6293
- SUSE Bug 1226933