openSUSE Security Update: Security update for opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2023:0397-1
Rating:             important
References:         
Cross-References:   CVE-2023-6345 CVE-2023-6346 CVE-2023-6347
                    CVE-2023-6348 CVE-2023-6350 CVE-2023-6351
                   
CVSS scores:
                    CVE-2023-6345 (NVD) : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
                    CVE-2023-6346 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2023-6347 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2023-6348 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2023-6350 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2023-6351 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:
                    openSUSE Leap 15.4:NonFree
______________________________________________________________________________

   An update that fixes 6 vulnerabilities is now available.

Description:

   This update for opera fixes the following issues:

   - Update to 105.0.4970.34
     * DNA-112796 [Import] Import bookmarks and history don't work
     * DNA-113147 Add strength setting for Lucid Mode
     * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable
       split preview
     * DNA-113287 Add strength setting for Lucid Mode in Easy Setup
     * DNA-113310 Remove Lucid Mode for Images
     * DNA-113360 [Lucid Mode] Shadow around lucid mode button
     * DNA-113447 Split preview line should be white
     * DNA-113630 Lucid Mode strength should default to highest (in desktop)
   - Changes in 105.0.4970.29
     * CHR-9416 Updating Chromium on desktop-stable-* branches
     * DNA-113292 Extension icons not shown after restart
   - The update to chromium 119.0.6045.199 fixes following issues:
     CVE-2023-6348, CVE-2023-6347, CVE-2023-6346, CVE-2023-6350,
     CVE-2023-6351, CVE-2023-6345


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.4:NonFree:

      zypper in -t patch openSUSE-2023-397=1



Package List:

   - openSUSE Leap 15.4:NonFree (x86_64):

      opera-105.0.4970.34-lp154.2.65.1


References:

   https://www.suse.com/security/cve/CVE-2023-6345.html
   https://www.suse.com/security/cve/CVE-2023-6346.html
   https://www.suse.com/security/cve/CVE-2023-6347.html
   https://www.suse.com/security/cve/CVE-2023-6348.html
   https://www.suse.com/security/cve/CVE-2023-6350.html
   https://www.suse.com/security/cve/CVE-2023-6351.html