openSUSE-SU-2021:1358-1

HIGH8.8

Security update for opera

Published Oct 15, 2021

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for opera fixes the following issues:

opera was updated to version 80.0.4170.16

Fixes:

CHR-8590 Update chromium on desktop-stable-94-4170 to 94.0.4606.61
DNA-95347 Make InstallerStep::Run async
DNA-95420 First suggestion in address field is often not highlighted
DNA-95613 Browser closing itself after closing SD/first tab and last opened tab
DNA-95725 Promote O80 to stable
DNA-95781 Import fixes for CVE-2021-37975, CVE-2021-37976 and CVE-2021-37974 to desktop-stable-94-4170
Complete Opera 80.0 changelog at: https://blogs.opera.com/desktop/changelog-for-80/
Drop Provides/Obsoletes for opera-gtk and opera-kde4 opera-gtk and opera-kde4 were last used in openSUSE 13.1

Opera was updated to version 79.0.4143.72

Fixes:

DNA-94933 Add emoji panel to address bar
DNA-95210 Add emoji YAT address bar suggestions
DNA-95221 Emoji button stuck in address bar
DNA-95325 Make y.at navigations to be reported with page_views events
DNA-95327 Add “Emojis” context menu option in address bar field
DNA-95339 Add YAT emoji url suggestion to search© dialog
DNA-95364 Add browser feature flag
DNA-95416 Remove emoji button from address bar
DNA-95439 Enable #yat-emoji-addresses on developer stream
DNA-95441 [Mac big sur] Emoji are not shown in address bar url
DNA-95445 Crash when removing unsynced pinboard bookmark with sync enabled
DNA-95512 Allow to show title and timer for simple banners
DNA-95516 Wrong label in settings for themes
DNA-95679 Temporarily disable AB test for a new autoupdater logic

Affected Packages

opera

openSUSE Leap 15.2 NonFreeopenSUSE Leap 15.3 NonFree

Fixed in:

80.0.4170.16-lp153.2.24.1

References

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAX3Q57Z6FBAZI5TMEFWFYPK5JXVPRKE/

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JAX3Q57Z6FBAZI5TMEFWFYPK5JXVPRKE/

https://www.suse.com/security/cve/CVE-2021-37974/

https://www.suse.com/security/cve/CVE-2021-37975/

https://www.suse.com/security/cve/CVE-2021-37976/

https://www.suse.com/support/security/rating/

CVSS Analysis

CVSS v3.1

8.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.8/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2021-37974 CVE-2021-37975 CVE-2021-37976

Ecosystems

openSUSE Leap 15.2 NonFree openSUSE Leap 15.3 NonFree

Timeline

PublishedOct 15, 2021

ModifiedOct 15, 2021

openSUSE-SU-2021:1358-1 | Mondoo Vulnerability Intelligence