openSUSE Security Update: Security update for opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2024:0053-1
Rating:             important
References:         
Cross-References:   CVE-2024-1059 CVE-2024-1060 CVE-2024-1077
                    CVE-2024-1283 CVE-2024-1284
CVSS scores:
                    CVE-2024-1059 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2024-1060 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2024-1077 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2024-1283 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
                    CVE-2024-1284 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:
                    openSUSE Leap 15.5:NonFree
______________________________________________________________________________

   An update that fixes 5 vulnerabilities is now available.

Description:

   This update for opera fixes the following issues:

   - Update to 107.0.5045.21
     * CHR-9604 Update Chromium on desktop-stable-121-5045 to 121.0.6167.160
     * DNA-114167 Crash at TopLevelStorageAccessPermissionContext::
       DecidePermission(permissions::PermissionRequestData, base::
       OnceCallback)
     * DNA-114303 Crash at auto std::__Cr::remove_if(auto, auto,
       base::ObserverList::Compact()::”lambda”(auto const&))
     * DNA-114478 Start Page opening animation refresh
     * DNA-114553 Change search box animation
     * DNA-114723 [Search box] No option to highlight typed text
     * DNA-114806 [Tab cycler] Domain address should be bolded
     * DNA-114846 Translations for O107
     * DNA-114924 Crash at opera::SuggestionModelBase::
       NavigateTo(WindowOpenDisposition)
   - The update to chromium 121.0.6167.160 fixes following issues:
     CVE-2024-1283, CVE-2024-1284

   - Update to 107.0.5045.15
     * CHR-9593 Update Chromium on desktop-stable-121-5045 to 121.0.6167.140
     * DNA-114421 Animate text in tab cycler from the center of the screen
     * DNA-114519 Crash at media::AVStreamToVideoDecoderConfig (AVStream
       const*, media::VideoDecoderConfig*)
     * DNA-114537 Default value for synchronization changed from 'Do not sync
       data' to 'Customise sync'
     * DNA-114554 Add shadow to tab thumbnails in tab cycler
     * DNA-114555 Fade out long tab titles
     * DNA-114686 [Import] Import from Opera Crypto is marked as done even
       when Crypto is not installed
     * DNA-114691 Update font colors
     * DNA-114692 Update shadow (glow) of tabs
     * DNA-114693 Update position of text and tabs when cycling through tabs
     * DNA-114790 [Linux] Unwanted 1px top border in full screen mode
   - Complete Opera 107 changelog at:
     https://blogs.opera.com/desktop/changelog-for-107/
   - The update to chromium 121.0.6167.140 fixes following issues:
     CVE-2024-1059, CVE-2024-1060, CVE-2024-1077

   - Update to 106.0.4998.70
     * DNA-112467 Shadow on Opera popups
     * DNA-114414 The "Move to" workspace submenu from tab strip stays blue
       when its submenu item is selected

   - Update to 106.0.4998.66
     * CHR-9416 Updating Chromium on desktop-stable-* branches
     * DNA-114489 Release and update opera:intro extension version in Opera


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.5:NonFree:

      zypper in -t patch openSUSE-2024-53=1



Package List:

   - openSUSE Leap 15.5:NonFree (x86_64):

      opera-107.0.5045.21-lp155.3.36.1


References:

   https://www.suse.com/security/cve/CVE-2024-1059.html
   https://www.suse.com/security/cve/CVE-2024-1060.html
   https://www.suse.com/security/cve/CVE-2024-1077.html
   https://www.suse.com/security/cve/CVE-2024-1283.html
   https://www.suse.com/security/cve/CVE-2024-1284.html