Security update for opera SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2023:0114-1 Final 1 1 2023-05-27T12:01:46Z current 2023-05-27T12:01:46Z 2023-05-27T12:01:46Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for opera This update for opera fixes the following issues: - Update to 99.0.4788.13 * CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 * DNA-107317 __delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726 - Update to 99.0.4788.9 * CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93 * DNA-107638 Translations for O99 * DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ] * DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs' * DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen * DNA-107840 Promote O99 to stable - Update to 98.0.4759.39 * DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails * DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small * DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs * DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging * DNA-107435 Building archive_source_release target fails * DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab * DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType) * DNA-107528 Handle real-time SD impression reporting * DNA-107546 Context menus broken with one workspace * DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage * DNA-107560 Optimize real-time SD impression reporting - Update to 98.0.4759.15 * CHR-9259 Update Chromium on desktop-stable-112-4759 to 112.0.5615.121 * CHR-9264 Update Chromium on desktop-stable-112-4759 to 112.0.5615.165 * DNA-104949 Cleanup reauthorizer and permission * DNA-106748 Presubmit problems * DNA-107262 Delete faulty translations - The update to chromium 112.0.5615.165 fixes following issues: CVE-2023-2133, CVE-2023-2134, CVE-2023-2135, CVE-2023-2136, CVE-2023-2137 - Changes in 98.0.4759.6 * CHR-9255 Update Chromium on desktop-stable-112-4759 to 112.0.5615.87 * DNA-106342 Crash when blocking cookies in sidebar web.infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool) * DNA-107054 Apply patch for CVE-2023-2033 * DNA-107141 Promote O98 to stable * DNA-107142 Translations for O98 - Update to 97.0.4719.83 * DNA-106342 Crash when blocking cookies in sidebar web. infobars::InfoBarManager::AddInfoBar(std::Cr::unique_ptr, bool) * DNA-106550 [SD][Drag&Drop] Create a static manual layout for speed dials * DNA-106791 Run smoketests on mac arm builds * DNA-107054 Apply patch for CVE-2023-2033 - Remove setup_repo.sh, fix non-executable-script rpmlint warning and we do not want create a repo - Update to 97.0.4719.63 * CHR-9245 Update Chromium on desktop-stable-111-4719 to 111.0.5563.147 * DNA-105919 Set new Baidu search string * DNA-106168 EasySetup update - Update to 97.0.4719.43 * CHR-9236 Update Chromium on desktop-stable-111-4719 to 111.0.5563.111 * DNA-105141 Tabs to the right of the currently active one swap their position with another when clicked * DNA-106044 Translations for O97 * DNA-106300 Fix rule for generating archive_browser_sym_files on crossplatform builds * DNA-106412 Content of popup not generated for some extensions when using more then one worksapce * DNA-106433 Extend Easy Setup API * DNA-106435 Increase timeout for the welcome page * DNA-106453 Public build from desktop-stable-111-4719 do not compile - The update to chromium 111.0.5563.111 fixes following issues: CVE-2023-1528, CVE-2023-1529, CVE-2023-1530, CVE-2023-1531, CVE-2023-1532, CVE-2023-1533, CVE-2023-1534 - Update to 97.0.4719.28 * DNA-106303 Extension should get proper parent window id from the sidebar API * DNA-106366 Opera crypto crashes on startup during session restore - Changes in 97.0.4719.26 * CHR-9225 Update Chromium on desktop-stable-111-4719 to 111.0.5563.65 * DNA-102778 Goth reports error for utils_api test * DNA-104983 Missing encryption option in sync settings * DNA-105293 add RateMe feature to Speed Dials and Suggested Speed Dials section * DNA-105299 Opera crash when closing tab by middle mouse button * DNA-105712 Update linux sandbox dependency for browsertests * DNA-105787 Settings extended with the AI section * DNA-105865 Add reload option for panels in opr.browserSidebarPrivate namespace * DNA-105944 Update checking of widevine certificate expiration to be independent from dateformat * DNA-105959 Update texts – native part * DNA-105961 Import translated texts – native part * DNA-105967 Crash at base::ObserverList::RemoveObserver(PrefObserver const*) * DNA-105973 Turn on #tab-tooltip-close-tabs on all streams * DNA-106061 Hide extension popup * DNA-106062 [Stable A/B Test] React Start Page for Austria, Italy, Spain and France 50% * DNA-106068 Extension shows if developer mode is enabled * DNA-106070 Feedback window for highlight popup displayed in wrong place * DNA-106079 EasySetup Disclaimer – Reduce size * DNA-106085 Crash at TabHoverCardController::OnViewIsDeleting(views::View*) * DNA-106086 Player home page does not show images in dark mode * DNA-106096 Increase prompt window in AB width * DNA-106109 Teasers on start page don’t show transparency * DNA-106114 AI Prompts button is after Reader Mode icon * DNA-106168 EasySetup update * DNA-106212 Promote O97 to stable * DNA-106225 Enable #shodan-extension for all streams * DNA-106229 Update J5 texts - The update to chromium 111.0.5563.65 fixes following issues: CVE-2023-1213, CVE-2023-1214, CVE-2023-1215, CVE-2023-1216, CVE-2023-1217, CVE-2023-1218, CVE-2023-1219, CVE-2023-1220, CVE-2023-1221, CVE-2023-1222, CVE-2023-1223, CVE-2023-1224, CVE-2023-1225, CVE-2023-1226, CVE-2023-1227, CVE-2023-1228, CVE-2023-1229, CVE-2023-1230, CVE-2023-1231, CVE-2023-1232, CVE-2023-1233, CVE-2023-1234, CVE-2023-1235, CVE-2023-1236 - Update to 96.0.4693.80 * CHR-9221 Update Chromium on desktop-stable-110-4693 to 110.0.5481.192 * DNA-104501 Opera don’t work with #high-efficiency-mode-available flag * DNA-105860 Enable #google-suggest-entities on all streams * DNA-106062 [Stable A/B Test] React Start Page for Austria, Italy, Spain and France 50% - Update to 96.0.4693.50 * DNA-104420 Creating mechanism to detect specific shortcut * DNA-104742 Wrong button place in opera tools section in sidebar menu * DNA-105141 Tabs to the right of the currently active one swap their position with another when clicked * DNA-105426 Add provisioning profiles during builds signing * DNA-105506 Replace all references to opera-api.com domain with opera-api2.com * DNA-105536 Enable kFeatureExtendedUnstoppableDomains for desktop * DNA-105727 [Rich Hints] Screenshot event must not collide with native PrtScr notification. * DNA-105740 [Rich Hints] Add event_user_survey to the whitelist The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2023-114 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ E-Mail link for openSUSE-SU-2023:0114-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://www.suse.com/security/cve/CVE-2023-1213/ SUSE CVE CVE-2023-1213 page https://www.suse.com/security/cve/CVE-2023-1214/ SUSE CVE CVE-2023-1214 page https://www.suse.com/security/cve/CVE-2023-1215/ SUSE CVE CVE-2023-1215 page https://www.suse.com/security/cve/CVE-2023-1216/ SUSE CVE CVE-2023-1216 page https://www.suse.com/security/cve/CVE-2023-1217/ SUSE CVE CVE-2023-1217 page https://www.suse.com/security/cve/CVE-2023-1218/ SUSE CVE CVE-2023-1218 page https://www.suse.com/security/cve/CVE-2023-1219/ SUSE CVE CVE-2023-1219 page https://www.suse.com/security/cve/CVE-2023-1220/ SUSE CVE CVE-2023-1220 page https://www.suse.com/security/cve/CVE-2023-1221/ SUSE CVE CVE-2023-1221 page https://www.suse.com/security/cve/CVE-2023-1222/ SUSE CVE CVE-2023-1222 page https://www.suse.com/security/cve/CVE-2023-1223/ SUSE CVE CVE-2023-1223 page https://www.suse.com/security/cve/CVE-2023-1224/ SUSE CVE CVE-2023-1224 page https://www.suse.com/security/cve/CVE-2023-1225/ SUSE CVE CVE-2023-1225 page https://www.suse.com/security/cve/CVE-2023-1226/ SUSE CVE CVE-2023-1226 page https://www.suse.com/security/cve/CVE-2023-1227/ SUSE CVE CVE-2023-1227 page https://www.suse.com/security/cve/CVE-2023-1228/ SUSE CVE CVE-2023-1228 page https://www.suse.com/security/cve/CVE-2023-1229/ SUSE CVE CVE-2023-1229 page https://www.suse.com/security/cve/CVE-2023-1230/ SUSE CVE CVE-2023-1230 page https://www.suse.com/security/cve/CVE-2023-1231/ SUSE CVE CVE-2023-1231 page https://www.suse.com/security/cve/CVE-2023-1232/ SUSE CVE CVE-2023-1232 page https://www.suse.com/security/cve/CVE-2023-1233/ SUSE CVE CVE-2023-1233 page https://www.suse.com/security/cve/CVE-2023-1234/ SUSE CVE CVE-2023-1234 page https://www.suse.com/security/cve/CVE-2023-1235/ SUSE CVE CVE-2023-1235 page https://www.suse.com/security/cve/CVE-2023-1236/ SUSE CVE CVE-2023-1236 page https://www.suse.com/security/cve/CVE-2023-1528/ SUSE CVE CVE-2023-1528 page https://www.suse.com/security/cve/CVE-2023-1529/ SUSE CVE CVE-2023-1529 page https://www.suse.com/security/cve/CVE-2023-1530/ SUSE CVE CVE-2023-1530 page https://www.suse.com/security/cve/CVE-2023-1531/ SUSE CVE CVE-2023-1531 page https://www.suse.com/security/cve/CVE-2023-1532/ SUSE CVE CVE-2023-1532 page https://www.suse.com/security/cve/CVE-2023-1533/ SUSE CVE CVE-2023-1533 page https://www.suse.com/security/cve/CVE-2023-1534/ SUSE CVE CVE-2023-1534 page https://www.suse.com/security/cve/CVE-2023-2033/ SUSE CVE CVE-2023-2033 page https://www.suse.com/security/cve/CVE-2023-2133/ SUSE CVE CVE-2023-2133 page https://www.suse.com/security/cve/CVE-2023-2134/ SUSE CVE CVE-2023-2134 page https://www.suse.com/security/cve/CVE-2023-2135/ SUSE CVE CVE-2023-2135 page https://www.suse.com/security/cve/CVE-2023-2136/ SUSE CVE CVE-2023-2136 page https://www.suse.com/security/cve/CVE-2023-2137/ SUSE CVE CVE-2023-2137 page https://www.suse.com/security/cve/CVE-2023-2721/ SUSE CVE CVE-2023-2721 page https://www.suse.com/security/cve/CVE-2023-2722/ SUSE CVE CVE-2023-2722 page https://www.suse.com/security/cve/CVE-2023-2723/ SUSE CVE CVE-2023-2723 page https://www.suse.com/security/cve/CVE-2023-2724/ SUSE CVE CVE-2023-2724 page https://www.suse.com/security/cve/CVE-2023-2725/ SUSE CVE CVE-2023-2725 page https://www.suse.com/security/cve/CVE-2023-2726/ SUSE CVE CVE-2023-2726 page openSUSE Leap 15.4 NonFree opera-99.0.4788.13-lp154.2.47.1 opera-99.0.4788.13-lp154.2.47.1 as a component of openSUSE Leap 15.4 NonFree Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1213 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1213.html CVE-2023-1213 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1214 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1214.html CVE-2023-1214 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1215 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1215.html CVE-2023-1215 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1216 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1216.html CVE-2023-1216 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) CVE-2023-1217 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1217.html CVE-2023-1217 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1218 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1218.html CVE-2023-1218 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1219 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1219.html CVE-2023-1219 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1220 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1220.html CVE-2023-1220 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) CVE-2023-1221 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1221.html CVE-2023-1221 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1222 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1222.html CVE-2023-1222 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1223 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1223.html CVE-2023-1223 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1224 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1224.html CVE-2023-1224 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1225 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1225.html CVE-2023-1225 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1226 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1226.html CVE-2023-1226 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) CVE-2023-1227 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1227.html CVE-2023-1227 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1228 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1228.html CVE-2023-1228 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1229 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1229.html CVE-2023-1229 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1230 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1230.html CVE-2023-1230 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-1231 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1231.html CVE-2023-1231 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low) CVE-2023-1232 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1232.html CVE-2023-1232 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low) CVE-2023-1233 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1233.html CVE-2023-1233 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) CVE-2023-1234 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1234.html CVE-2023-1234 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low) CVE-2023-1235 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1235.html CVE-2023-1235 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low) CVE-2023-1236 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1236.html CVE-2023-1236 https://bugzilla.suse.com/1209040 SUSE Bug 1209040 Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1528 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1528.html CVE-2023-1528 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High) CVE-2023-1529 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1529.html CVE-2023-1529 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1530 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1530.html CVE-2023-1530 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1531 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1531.html CVE-2023-1531 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1532 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1532.html CVE-2023-1532 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1533 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1533.html CVE-2023-1533 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-1534 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-1534.html CVE-2023-1534 https://bugzilla.suse.com/1209598 SUSE Bug 1209598 Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2033 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2033.html CVE-2023-2033 https://bugzilla.suse.com/1210478 SUSE Bug 1210478 Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2133 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2133.html CVE-2023-2133 https://bugzilla.suse.com/1210618 SUSE Bug 1210618 Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2134 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2134.html CVE-2023-2134 https://bugzilla.suse.com/1210618 SUSE Bug 1210618 Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2135 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2135.html CVE-2023-2135 https://bugzilla.suse.com/1210618 SUSE Bug 1210618 Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) CVE-2023-2136 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2136.html CVE-2023-2136 https://bugzilla.suse.com/1210618 SUSE Bug 1210618 Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-2137 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2137.html CVE-2023-2137 https://bugzilla.suse.com/1210618 SUSE Bug 1210618 https://bugzilla.suse.com/1210660 SUSE Bug 1210660 Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) CVE-2023-2721 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2721.html CVE-2023-2721 https://bugzilla.suse.com/1211442 SUSE Bug 1211442 Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2722 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2722.html CVE-2023-2722 https://bugzilla.suse.com/1211442 SUSE Bug 1211442 Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2723 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2723.html CVE-2023-2723 https://bugzilla.suse.com/1211442 SUSE Bug 1211442 Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2724 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2724.html CVE-2023-2724 https://bugzilla.suse.com/1211442 SUSE Bug 1211442 Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-2725 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2725.html CVE-2023-2725 https://bugzilla.suse.com/1211442 SUSE Bug 1211442 Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium) CVE-2023-2726 openSUSE Leap 15.4 NonFree:opera-99.0.4788.13-lp154.2.47.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AOK6KL3HWOEESQP5YYTJH4ANDT2XMQRU/ https://www.suse.com/security/cve/CVE-2023-2726.html CVE-2023-2726 https://bugzilla.suse.com/1211442 SUSE Bug 1211442