opensuse-su-2021:1209-1
Vulnerability from csaf_opensuse
Published
2021-08-29 22:09
Modified
2021-08-29 22:09
Summary
Security update for opera
Notes
Title of the patch
Security update for opera
Description of the patch
This update for opera fixes the following issues:
opera was updated to version 78.0.4093.147
- CHR-8251 Update chromium on desktop-stable-92-4093
to 92.0.4515.131
- DNA-93036 Opera not starting after closing window.
Processes still working.
- DNA-94516 Add ‘Detach tab’ entry to tab menu
- DNA-94584 [Mac] Sidebar setup not closed after press
‘Add extensions’ button
- DNA-94761 Crash when trying to record “Chrome developer” trace
- DNA-94790 Crash at opera::VideoConferenceTabDetachController::
OnBrowserAboutToStartClosing(Browser*)
- The update to chromium 92.0.4515.131 fixes following issues:
CVE-2021-30590, CVE-2021-30591, CVE-2021-30592, CVE-2021-30593,
CVE-2021-30594, CVE-2021-30596, CVE-2021-30597
Update to version 78.0.4093.112
- DNA-94466 Implement sorting Pinboards in overview
- DNA-94582 Add access to APIs for showing pinboard icon in
sidebar
- DNA-94603 Suspicious pinboards events
- DNA-94625 Disable opr.pinboardPrivate.getThumbnail() for
local files
- DNA-94640 Promote O78 to stable
- DNA-94661 Missing translations for some languages
- Complete Opera 78.0 changelog at: https://blogs.opera.com/desktop/changelog-for-78/
Patchnames
openSUSE-2021-1209
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for opera", "title": "Title of the patch" }, { "category": "description", "text": "This update for opera fixes the following issues:\n\nopera was updated to version 78.0.4093.147\n\n- CHR-8251 Update chromium on desktop-stable-92-4093\n to 92.0.4515.131\n- DNA-93036 Opera not starting after closing window.\n Processes still working.\n- DNA-94516 Add \u2018Detach tab\u2019 entry to tab menu\n- DNA-94584 [Mac] Sidebar setup not closed after press\n \u2018Add extensions\u2019 button\n- DNA-94761 Crash when trying to record \u201cChrome developer\u201d trace\n- DNA-94790 Crash at opera::VideoConferenceTabDetachController::\n OnBrowserAboutToStartClosing(Browser*)\n- The update to chromium 92.0.4515.131 fixes following issues:\n CVE-2021-30590, CVE-2021-30591, CVE-2021-30592, CVE-2021-30593,\n CVE-2021-30594, CVE-2021-30596, CVE-2021-30597\n\nUpdate to version 78.0.4093.112\n\n- DNA-94466 Implement sorting Pinboards in overview\n- DNA-94582 Add access to APIs for showing pinboard icon in\n sidebar\n- DNA-94603 Suspicious pinboards events\n- DNA-94625 Disable opr.pinboardPrivate.getThumbnail() for\n local files\n- DNA-94640 Promote O78 to stable\n- DNA-94661 Missing translations for some languages\n- Complete Opera 78.0 changelog at: https://blogs.opera.com/desktop/changelog-for-78/ \n\n", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-1209", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1209-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:1209-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6VAM7DBKPG7SO56B3HM7RJ5NXFLCFPWT/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:1209-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6VAM7DBKPG7SO56B3HM7RJ5NXFLCFPWT/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30590 page", "url": "https://www.suse.com/security/cve/CVE-2021-30590/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30591 page", "url": "https://www.suse.com/security/cve/CVE-2021-30591/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30592 page", "url": "https://www.suse.com/security/cve/CVE-2021-30592/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30593 page", "url": "https://www.suse.com/security/cve/CVE-2021-30593/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30594 page", "url": "https://www.suse.com/security/cve/CVE-2021-30594/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30596 page", "url": "https://www.suse.com/security/cve/CVE-2021-30596/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-30597 page", "url": "https://www.suse.com/security/cve/CVE-2021-30597/" } ], "title": "Security update for opera", "tracking": { "current_release_date": "2021-08-29T22:09:23Z", "generator": { "date": "2021-08-29T22:09:23Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:1209-1", "initial_release_date": "2021-08-29T22:09:23Z", "revision_history": [ { "date": "2021-08-29T22:09:23Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "opera-78.0.4093.147-lp153.2.12.1.x86_64", "product": { "name": "opera-78.0.4093.147-lp153.2.12.1.x86_64", "product_id": "opera-78.0.4093.147-lp153.2.12.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2 NonFree", "product": { "name": "openSUSE Leap 15.2 NonFree", "product_id": "openSUSE Leap 15.2 NonFree", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } }, { "category": "product_name", "name": "openSUSE Leap 15.3 NonFree", "product": { "name": "openSUSE Leap 15.3 NonFree", "product_id": "openSUSE Leap 15.3 NonFree", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.3" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "opera-78.0.4093.147-lp153.2.12.1.x86_64 as component of openSUSE Leap 15.2 NonFree", "product_id": "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" }, "product_reference": "opera-78.0.4093.147-lp153.2.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2 NonFree" }, { "category": "default_component_of", "full_product_name": { "name": "opera-78.0.4093.147-lp153.2.12.1.x86_64 as component of openSUSE Leap 15.3 NonFree", "product_id": "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" }, "product_reference": "opera-78.0.4093.147-lp153.2.12.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.3 NonFree" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-30590", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30590" } ], "notes": [ { "category": "general", "text": "Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30590", "url": "https://www.suse.com/security/cve/CVE-2021-30590" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30590", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30590" }, { "cve": "CVE-2021-30591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30591" } ], "notes": [ { "category": "general", "text": "Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30591", "url": "https://www.suse.com/security/cve/CVE-2021-30591" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30591", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30591" }, { "cve": "CVE-2021-30592", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30592" } ], "notes": [ { "category": "general", "text": "Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30592", "url": "https://www.suse.com/security/cve/CVE-2021-30592" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30592", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30592" }, { "cve": "CVE-2021-30593", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30593" } ], "notes": [ { "category": "general", "text": "Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30593", "url": "https://www.suse.com/security/cve/CVE-2021-30593" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30593", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30593" }, { "cve": "CVE-2021-30594", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30594" } ], "notes": [ { "category": "general", "text": "Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30594", "url": "https://www.suse.com/security/cve/CVE-2021-30594" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30594", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30594" }, { "cve": "CVE-2021-30596", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30596" } ], "notes": [ { "category": "general", "text": "Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30596", "url": "https://www.suse.com/security/cve/CVE-2021-30596" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30596", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30596" }, { "cve": "CVE-2021-30597", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-30597" } ], "notes": [ { "category": "general", "text": "Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-30597", "url": "https://www.suse.com/security/cve/CVE-2021-30597" }, { "category": "external", "summary": "SUSE Bug 1189006 for CVE-2021-30597", "url": "https://bugzilla.suse.com/1189006" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64", "openSUSE Leap 15.3 NonFree:opera-78.0.4093.147-lp153.2.12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-08-29T22:09:23Z", "details": "moderate" } ], "title": "CVE-2021-30597" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…