openSUSE Security Update: Security update for opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2022:0050-1
Rating:             important
References:         #1027353 #1081164 #1102775 #1108471 #1111122 
                    #1116807 #1140341 #1145864 #1152968 #1174961 
                    #1178021 #1178351 #1179009 #1179699 #1181591 
                    SLE-6120 
Cross-References:   CVE-2018-18065 CVE-2020-15862 CVE-2022-0452
                    CVE-2022-0453 CVE-2022-0454 CVE-2022-0455
                    CVE-2022-0456 CVE-2022-0457 CVE-2022-0458
                    CVE-2022-0459 CVE-2022-0460 CVE-2022-0461
                    CVE-2022-0462 CVE-2022-0463 CVE-2022-0464
                    CVE-2022-0465 CVE-2022-0466 CVE-2022-0467
                    CVE-2022-0468 CVE-2022-0469 CVE-2022-0470
                   
CVSS scores:
                    CVE-2018-18065 (NVD) : 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
                    CVE-2018-18065 (SUSE): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
                    CVE-2020-15862 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
                    CVE-2020-15862 (SUSE): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Products:
                    openSUSE Leap 15.3
                    openSUSE Leap 15.3:NonFree
______________________________________________________________________________

   An update that fixes 21 vulnerabilities, contains one
   feature is now available.

Description:

   This update for opera fixes the following issues:

   - Update to 84.0.4316.14
     - CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82
     - DNA-97177 Battery saver ??? the icon looks bad for DPI!=100%
     - DNA-97614 automatic video pop-out for most popular websites
       broadcasting Winter Olympic Games 2022
     - DNA-97804 Promote O84 to stable

   - The update to chromium 98.0.4758.82 fixes following issues:
     CVE-2022-0452, CVE-2022-0453, CVE-2022-0454, CVE-2022-0455,
     CVE-2022-0456, CVE-2022-0457, CVE-2022-0458, CVE-2022-0459,
     CVE-2022-0460, CVE-2022-0461, CVE-2022-0462, CVE-2022-0463,
     CVE-2022-0464, CVE-2022-0465, CVE-2022-0466, CVE-2022-0467,
     CVE-2022-0468, CVE-2022-0469, CVE-2022-0470

   - Complete Opera 84.0 changelog at:
     https://blogs.opera.com/desktop/changelog-for-84/

   - Update to 83.0.4254.54
     - DNA-96581 Fast tab tooltip doesn???t always show related sites with
       scrollable tab strip
     - DNA-96608 Cannot drag a tab to create a new window
     - DNA-96657 Do not make tab tooltip hoverable if there???s no list of
       tabs
     - DNA-97291 Crash at
       opera::flow::FlowSessionImpl::RegisterDevice(base::OnceCallback)
     - DNA-97468 Incorrect number of restored tabs when video-popout is
       detached
     - DNA-97476 Add retry to stapling during signing
     - DNA-97609 Failing MetricsReporterTest.TimeSpent* smoketests


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.3:NonFree:

      zypper in -t patch openSUSE-2022-50=1

   - openSUSE Leap 15.3:

      zypper in -t patch openSUSE-SLE-15.3-2022-50=1



Package List:

   - openSUSE Leap 15.3:NonFree (x86_64):

      opera-84.0.4316.14-lp153.2.36.1

   - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

      libsnmp30-5.7.3-10.9.1
      libsnmp30-debuginfo-5.7.3-10.9.1
      net-snmp-5.7.3-10.9.1
      net-snmp-debuginfo-5.7.3-10.9.1
      net-snmp-debugsource-5.7.3-10.9.1
      net-snmp-devel-5.7.3-10.9.1
      perl-SNMP-5.7.3-10.9.1
      perl-SNMP-debuginfo-5.7.3-10.9.1
      python2-net-snmp-5.7.3-10.9.1
      python2-net-snmp-debuginfo-5.7.3-10.9.1
      python3-net-snmp-5.7.3-10.9.1
      python3-net-snmp-debuginfo-5.7.3-10.9.1
      snmp-mibs-5.7.3-10.9.1

   - openSUSE Leap 15.3 (x86_64):

      libsnmp30-32bit-5.7.3-10.9.1
      libsnmp30-32bit-debuginfo-5.7.3-10.9.1
      net-snmp-devel-32bit-5.7.3-10.9.1


References:

   https://www.suse.com/security/cve/CVE-2018-18065.html
   https://www.suse.com/security/cve/CVE-2020-15862.html
   https://www.suse.com/security/cve/CVE-2022-0452.html
   https://www.suse.com/security/cve/CVE-2022-0453.html
   https://www.suse.com/security/cve/CVE-2022-0454.html
   https://www.suse.com/security/cve/CVE-2022-0455.html
   https://www.suse.com/security/cve/CVE-2022-0456.html
   https://www.suse.com/security/cve/CVE-2022-0457.html
   https://www.suse.com/security/cve/CVE-2022-0458.html
   https://www.suse.com/security/cve/CVE-2022-0459.html
   https://www.suse.com/security/cve/CVE-2022-0460.html
   https://www.suse.com/security/cve/CVE-2022-0461.html
   https://www.suse.com/security/cve/CVE-2022-0462.html
   https://www.suse.com/security/cve/CVE-2022-0463.html
   https://www.suse.com/security/cve/CVE-2022-0464.html
   https://www.suse.com/security/cve/CVE-2022-0465.html
   https://www.suse.com/security/cve/CVE-2022-0466.html
   https://www.suse.com/security/cve/CVE-2022-0467.html
   https://www.suse.com/security/cve/CVE-2022-0468.html
   https://www.suse.com/security/cve/CVE-2022-0469.html
   https://www.suse.com/security/cve/CVE-2022-0470.html
   https://bugzilla.suse.com/1027353
   https://bugzilla.suse.com/1081164
   https://bugzilla.suse.com/1102775
   https://bugzilla.suse.com/1108471
   https://bugzilla.suse.com/1111122
   https://bugzilla.suse.com/1116807
   https://bugzilla.suse.com/1140341
   https://bugzilla.suse.com/1145864
   https://bugzilla.suse.com/1152968
   https://bugzilla.suse.com/1174961
   https://bugzilla.suse.com/1178021
   https://bugzilla.suse.com/1178351
   https://bugzilla.suse.com/1179009
   https://bugzilla.suse.com/1179699
   https://bugzilla.suse.com/1181591

openSUSE: 2022:0050-1 important: opera

February 25, 2022
An update that fixes 21 vulnerabilities, contains one feature is now available

Description

This update for opera fixes the following issues: - Update to 84.0.4316.14 - CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82 - DNA-97177 Battery saver ??? the icon looks bad for DPI!=100% - DNA-97614 automatic video pop-out for most popular websites broadcasting Winter Olympic Games 2022 - DNA-97804 Promote O84 to stable - The update to chromium 98.0.4758.82 fixes following issues: CVE-2022-0452, CVE-2022-0453, CVE-2022-0454, CVE-2022-0455, CVE-2022-0456, CVE-2022-0457, CVE-2022-0458, CVE-2022-0459, CVE-2022-0460, CVE-2022-0461, CVE-2022-0462, CVE-2022-0463, CVE-2022-0464, CVE-2022-0465, CVE-2022-0466, CVE-2022-0467, CVE-2022-0468, CVE-2022-0469, CVE-2022-0470 - Complete Opera 84.0 changelog at: https://blogs.opera.com/desktop/changelog-for-84/ - Update to 83.0.4254.54 - DNA-96581 Fast tab tooltip doesn???t always show related sites with scrollable tab strip - DNA-96608 Cannot drag a tab to create a new window - DNA-96657 Do not make tab tooltip hoverable if there???s no list of tabs - DNA-97291 Crash at opera::flow::FlowSessionImpl::RegisterDevice(base::OnceCallback) - DNA-97468 Incorrect number of restored tabs when video-popout is detached - DNA-97476 Add retry to stapling during signing - DNA-97609 Failing MetricsReporterTest.TimeSpent* smoketests

 

Patch

Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3:NonFree: zypper in -t patch openSUSE-2022-50=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-50=1


Package List

- openSUSE Leap 15.3:NonFree (x86_64): opera-84.0.4316.14-lp153.2.36.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libsnmp30-5.7.3-10.9.1 libsnmp30-debuginfo-5.7.3-10.9.1 net-snmp-5.7.3-10.9.1 net-snmp-debuginfo-5.7.3-10.9.1 net-snmp-debugsource-5.7.3-10.9.1 net-snmp-devel-5.7.3-10.9.1 perl-SNMP-5.7.3-10.9.1 perl-SNMP-debuginfo-5.7.3-10.9.1 python2-net-snmp-5.7.3-10.9.1 python2-net-snmp-debuginfo-5.7.3-10.9.1 python3-net-snmp-5.7.3-10.9.1 python3-net-snmp-debuginfo-5.7.3-10.9.1 snmp-mibs-5.7.3-10.9.1 - openSUSE Leap 15.3 (x86_64): libsnmp30-32bit-5.7.3-10.9.1 libsnmp30-32bit-debuginfo-5.7.3-10.9.1 net-snmp-devel-32bit-5.7.3-10.9.1


References

https://www.suse.com/security/cve/CVE-2018-18065.html https://www.suse.com/security/cve/CVE-2020-15862.html https://www.suse.com/security/cve/CVE-2022-0452.html https://www.suse.com/security/cve/CVE-2022-0453.html https://www.suse.com/security/cve/CVE-2022-0454.html https://www.suse.com/security/cve/CVE-2022-0455.html https://www.suse.com/security/cve/CVE-2022-0456.html https://www.suse.com/security/cve/CVE-2022-0457.html https://www.suse.com/security/cve/CVE-2022-0458.html https://www.suse.com/security/cve/CVE-2022-0459.html https://www.suse.com/security/cve/CVE-2022-0460.html https://www.suse.com/security/cve/CVE-2022-0461.html https://www.suse.com/security/cve/CVE-2022-0462.html https://www.suse.com/security/cve/CVE-2022-0463.html https://www.suse.com/security/cve/CVE-2022-0464.html https://www.suse.com/security/cve/CVE-2022-0465.html https://www.suse.com/security/cve/CVE-2022-0466.html https://www.suse.com/security/cve/CVE-2022-0467.html https://www.suse.com/security/cve/CVE-2022-0468.html https://www.suse.com/security/cve/CVE-2022-0469.html https://www.suse.com/security/cve/CVE-2022-0470.html https://bugzilla.suse.com/1027353 https://bugzilla.suse.com/1081164 https://bugzilla.suse.com/1102775 https://bugzilla.suse.com/1108471 https://bugzilla.suse.com/1111122 https://bugzilla.suse.com/1116807 https://bugzilla.suse.com/1140341 https://bugzilla.suse.com/1145864 https://bugzilla.suse.com/1152968 https://bugzilla.suse.com/1174961 https://bugzilla.suse.com/1178021 https://bugzilla.suse.com/1178351 https://bugzilla.suse.com/1179009 https://bugzilla.suse.com/1179699 https://bugzilla.suse.com/1181591


Severity
Announcement ID: openSUSE-SU-2022:0050-1
Rating: important
Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.3:NonFree ble.

Related News

24.Key Code Esm H320
2 - 3 min read
The Akira ransomware group has extorted approximately $42 million from over 250 victims since January 1, 2024. The group initially focused on
5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved