Security update for opera SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2022:10117-1 Final 1 1 2022-09-12T14:01:35Z current 2022-09-12T14:01:35Z 2022-09-12T14:01:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for opera This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to install and update VPN Pro app, when it's not installed - DNA-100901 Disappearing 'X' when closing tabs. - DNA-101093 Changing News section is not working - DNA-101246 Use long tail list for suggesting instead of current Speed Dial Suggestions - DNA-101278 PDF don't work on Opera with CN location - DNA-101312 Allow changing logged in user with BrowserAPI - DNA-101315 Can not connect to free VPN in private window - DNA-101411 [Linux] Clicking VpnPopup Settings to 'vpnWithDisclaimer' leads to black popup - DNA-101422 Crash at void content::NavigationControllerImpl:: NavigateToExistingPendingEntry(content::ReloadType, int, bool) - DNA-101429 News loads for Global-EN language by default - DNA-101482 Crash at ProfileKey::GetProtoDatabaseProvider() - DNA-101485 Crash at base::SequencedTaskRunnerHandle::Get() via extensions::OperaTouchPrivateGetImageFunction::PerformGetImage - DNA-101524 [Mac] Tab should be highlighted again after dismissing context menu - DNA-101549 Crash at views::View::IsMouseHovered() The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2022-10117 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBGINNIWBONVAY4XS5FGSQDKRADTHUQI/ E-Mail link for openSUSE-SU-2022:10117-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2022-3075/ SUSE CVE CVE-2022-3075 page openSUSE Leap 15.3 NonFree opera-90.0.4480.84-lp153.2.60.1 opera-90.0.4480.84-lp153.2.60.1 as a component of openSUSE Leap 15.3 NonFree Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. CVE-2022-3075 openSUSE Leap 15.3 NonFree:opera-90.0.4480.84-lp153.2.60.1 critical 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UBGINNIWBONVAY4XS5FGSQDKRADTHUQI/ https://www.suse.com/security/cve/CVE-2022-3075.html CVE-2022-3075 https://bugzilla.suse.com/1203102 SUSE Bug 1203102