Security update for opera SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2020:0949-1 Final 1 1 2020-07-10T06:37:58Z current 2020-07-10T06:37:58Z 2020-07-10T06:37:58Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for opera This update for opera fixes the following issues: - Update to version 69.0.3686.49 - CHR-7971 Update chromium on desktop-stable-83-3686 to 83.0.4103.116 (CVE-2020-6509) - DNA-79195 Wrong date on history - DNA-86090 Crash at views::View::ReorderChildView(views::View*, int) - DNA-86122 [Mac] Some popovers have incorrectly themed arrow - DNA-86833 Add hint to tell users that tab content is now searched - DNA-86906 [Search in tabs] No matching results in your open tabs label not displayed for some strings not found. - DNA-86983 Allow to search from the tile - DNA-87029 Search in tabs dropdown should disappear when resizing window - DNA-87051 No autocompletion in the address bar for Speed Dials - DNA-87091 Do not vertically center search-in-tabs dialog - DNA-87113 Crash at content::NavigationRequest::GetRenderFrameHost() - DNA-87114 Double scrollbar in bookmarks popup - DNA-87117 Hide “Provide additional details” button when crash is discarded by Socorro - DNA-87122 Hide provide more information button from infobar when crash is discarded - DNA-87153 The icons cover the inscription on the BABE picture title - DNA-87203 The scroll view changes visible area unexpectedly - DNA-87243 Provide missing translations - DNA-87245 Extend schema and report search events - DNA-87261 Allow to use search and modal at the same time - DNA-87273 Switch to dedicated subdomain - Complete Opera 69.0 changelog at: https://blogs.opera.com/desktop/changelog-for-69/ The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2020-949 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2VTIT245CBSRENYB4SISPGUQ5NUKIPSE/ E-Mail link for openSUSE-SU-2020:0949-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1173251 SUSE Bug 1173251 https://www.suse.com/security/cve/CVE-2020-6509/ SUSE CVE CVE-2020-6509 page openSUSE Leap 15.1 NonFree opera-69.0.3686.49-lp151.2.21.1 opera-69.0.3686.49-lp151.2.21.1 as a component of openSUSE Leap 15.1 NonFree Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. CVE-2020-6509 openSUSE Leap 15.1 NonFree:opera-69.0.3686.49-lp151.2.21.1 critical 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2VTIT245CBSRENYB4SISPGUQ5NUKIPSE/ https://www.suse.com/security/cve/CVE-2020-6509.html CVE-2020-6509 https://bugzilla.suse.com/1173251 SUSE Bug 1173251