openSUSE Security Update: Security update for opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2022:10057-1
Rating:             important
References:         
Cross-References:   CVE-2022-2007 CVE-2022-2008 CVE-2022-2010
                    CVE-2022-2011 CVE-2022-2294
Affected Products:
                    openSUSE Leap 15.3:NonFree
                    openSUSE Leap 15.4:NonFree
______________________________________________________________________________

   An update that fixes 5 vulnerabilities is now available.

Description:

   This update for opera fixes the following issues:

   opera was updated to 88.0.4412.74:

   - DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches

   Update to 88.0.4412.53

     - DNA-99108 [Lin] Options on video pop out not possible to change
     - DNA-99832 On automatic video popout, close button should not stop video
     - DNA-99833 Allow turning on and off of each 'BABE' section from gear
       icon
     - DNA-99852 Default browser in Mac installer
     - DNA-99993 Crashes in AudioFileReaderTest,
       FFmpegAACBitstreamConverterTest
     - DNA-100045 iFrame Exception not unblocked with Acceptable Ads
     - DNA-100291 Update snapcraft uploading/releasing in scripts to use
       craft store

   Changes in 88.0.4412.40

     - CHR-8905 Update chromium on desktop-stable-102-4412 to 102.0.5005.115
     - DNA-99713 Sizing issues with video conferencing controls in PiP window
     - DNA-99831 Add 'back to tab' button like on video pop-out

   - The update to chromium 102.0.5005.115 fixes following issues:
     CVE-2022-2007, CVE-2022-2008, CVE-2022-2010, CVE-2022-2011

   Changes in 88.0.4412.27

     - DNA-99725 Crash at opera::ModalDialogViews::Show()
     - DNA-99752 Do not allow to uncheck all lists for adBlock
     - DNA-99918 Enable #scrollable-tab-strip on desktop-stable-102-4412
     - DNA-99969 Promote O88 to stable

   - Complete Opera 88.0 changelog at:
     https://blogs.opera.com/desktop/changelog-for-88/

   Update to 87.0.4390.45

     - DNA-99478 Top Sites don???t always has big icon
     - DNA-99702 Enable Acceptable Ads for stable stream
     - DNA-99725 Crash at opera::ModalDialogViews::Show()
     - DNA-99752 Do not allow to uncheck all lists for adBlock

   - Update to 87.0.4390.36
     - CHR-8883 Update chromium on desktop-stable-101-4390 to 101.0.4951.67
     - DNA-99190 Investigate windows installer signature errors on win7
     - DNA-99502 Sidebar ??? API to open panels
     - DNA-99593 Report sad tab displayed counts per kind
     - DNA-99628 Personalized Speed Dial context menu issue fix


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.4:NonFree:

      zypper in -t patch openSUSE-2022-10057=1

   - openSUSE Leap 15.3:NonFree:

      zypper in -t patch openSUSE-2022-10057=1



Package List:

   - openSUSE Leap 15.4:NonFree (x86_64):

      opera-88.0.4412.74-lp154.2.11.1

   - openSUSE Leap 15.3:NonFree (x86_64):

      opera-88.0.4412.74-lp153.2.51.1


References:

   https://www.suse.com/security/cve/CVE-2022-2007.html
   https://www.suse.com/security/cve/CVE-2022-2008.html
   https://www.suse.com/security/cve/CVE-2022-2010.html
   https://www.suse.com/security/cve/CVE-2022-2011.html
   https://www.suse.com/security/cve/CVE-2022-2294.html