openSUSE Security Update: Security update for opera
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2022:10239-1
Rating:             important
References:         
Cross-References:   CVE-2022-3885 CVE-2022-3886 CVE-2022-3887
                    CVE-2022-3888 CVE-2022-3889
CVSS scores:
                    CVE-2022-3885 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2022-3886 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2022-3887 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2022-3888 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
                    CVE-2022-3889 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:
                    openSUSE Leap 15.4:NonFree
______________________________________________________________________________

   An update that fixes 5 vulnerabilities is now available.

Description:

   This update for opera fixes the following issues:

   Update to 93.0.4585.37
     - DNA-102885 Turn on #sidebar-autohide on all streams
     - DNA-103020 Turn on #start-page-redesign on developer
     - DNA-103042 Fix import from Firefox
     - DNA-103222 [Speed Dial Suggestions] All opera.com subpages suggestions
       lead to the opera.com homepage
     - DNA-103368 TikTok videos starting to play automaticly
     - DNA-103535 Startpage preview is not visible
     - DNA-103665 Reduce Tik Tok pane width

   Changes in 93.0.4585.21
     - CHR-9067 Update chromium on desktop-stable-107-4585 to 107.0.5304.110
     - DNA-102365 Turn off opera://dify-cards page
     - DNA-102689 [GX] Create GX widgets section in Easy Setup
     - DNA-102768 [Easy setup] Sidebar options not animated
     - DNA-102872 No animation for opening sidebar while sidebar is closing
     - DNA-102929 [Weather][Private window] Weather widget appears in private
       window
     - DNA-103032 Messenger sidebar icon doesn’t look great
     - DNA-103046 Opera crash with flag –with-feature:sidebar-autohide=off
     - DNA-103107 Automatic video popout for popular sports sites – World
       Cup
     - DNA-103310 hideOperaObject() in browser.js stopped working
       on public builds
     - DNA-103320 Crash at chrome::FindBrowserByType(absl::optional)
     - DNA-103321 Tab preview causes freeze when dragging tabs
     - DNA-103375 [Workspaces] Crash at absl::raw_log_internal::
       RawLog(absl::LogSeverity, char const*, int, char const*, …)
     - DNA-103395 Remove unused resources
     - DNA-103396 Internal translations
     - The update to chromium 107.0.5304.110 fixes following issues:
       CVE-2022-3885, CVE-2022-3886, CVE-2022-3887, CVE-2022-3888,
       CVE-2022-3889, CVE-2022-3889


Patch Instructions:

   To install this openSUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - openSUSE Leap 15.4:NonFree:

      zypper in -t patch openSUSE-2022-10239=1



Package List:

   - openSUSE Leap 15.4:NonFree (x86_64):

      opera-93.0.4585.37-lp154.2.32.1


References:

   https://www.suse.com/security/cve/CVE-2022-3885.html
   https://www.suse.com/security/cve/CVE-2022-3886.html
   https://www.suse.com/security/cve/CVE-2022-3887.html
   https://www.suse.com/security/cve/CVE-2022-3888.html
   https://www.suse.com/security/cve/CVE-2022-3889.html