CVE-2020-6458

Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Chromium-browser 81.0.4044.122 fixes security issues:

Multiple flaws were found in the way Chromium 81.0.4044.92 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2020-6457, CVE-2020-6458, CVE-2020-6459, CVE-2020-6460)

This update for chromium fixes the following issues:

Chromium was updated to 81.0.4044.129 (boo#1170107):

• CVE-2020-0561: Fixed a use after free in storage
• CVE-2020-6462: Fixed a use after free in task scheduling
• CVE-2020-6459: Fixed a use after free in payments
• CVE-2020-6460: Fixed an insufficient data validation in URL formatting
• CVE-2020-6458: Fixed an out of bounds read and write in PDFium

This update for chromium fixes the following issues:

Chromium was updated to 81.0.4044.129 (boo#1170107):

• CVE-2020-0561: Fixed a use after free in storage
• CVE-2020-6462: Fixed a use after free in task scheduling
• CVE-2020-6459: Fixed a use after free in payments
• CVE-2020-6460: Fixed an insufficient data validation in URL formatting
• CVE-2020-6458: Fixed an out of bounds read and write in PDFium

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for opera fixes the following issues:

Opera was updated to version 68.0.3618.63

• CHR-7889 Update chromium on desktop-stable-81-3618 to 81.0.4044.122

• CHR-7896 Update chromium on desktop-stable-81-3618 to 81.0.4044.129

• DNA-85287 Set standard spacing for Yandex prompt

• DNA-85416 [Mac] Animation of tab insert is glitchy on slow machines

• DNA-85568 Verify API for triggering “unread” mode with Instagram.

• DNA-86027 Present Now not working in google meet after canceling it once

• DNA-86028 Add a back and forward button in the Instagram panel

• DNA-86029 Investigate and implement re-freshing of the instagram panel content

• Update chromium to 81.0.4044.122 fixes CVE-2020-6458, CVE-2020-6459, CVE-2020-6460

• Update chromium to 81.0.4044.129 fixes CVE-2020-6461, CVE-2020-6462

Update to version 68.0.3618.56

• DNA-85256 [Win] Cookies section on site pages is white in dark mode
• DNA-85474 [Mac] Dragging tabs to the left with hidden sidebar is broken
• DNA-85771 DNS-over-HTTPS example in settings is wrong
• DNA-85976 Change page display time when navigating from opera:startpage
• CHR-7878 Update chromium on desktop-stable-81-3618 to 81.0.4044.113 (CVE-2020-6457)
• DNA-78158 PATCH-1272 should be removed
• DNA-84721 Weather widget is overlapped when ‘Use bigger tiles’
• DNA-85246 Implement 0-state dialog and onboarding
• DNA-85354 O-menu is misplaced when opened with maximized opera
• DNA-85405 Add link to Privacy Policy on the 0-state dialog
• DNA-85409 Ask for geolocation EULA once
• DNA-85426 Crash at opera::DownloadActionButton::Update()
• DNA-85454 Add id’s to elements for testing
• DNA-85493 Add “Show Weather” toggle to “Start Page” section in Easy Setup
• DNA-85501 Set timestamps in geolocation exception record
• DNA-85514 Add fallback when geolocation fails
• DNA-85713 Report consent for geolocation on start page
• DNA-85753 Fetch news configuration from new endpoint
• DNA-85798 Incorrect padding in Search in Tabs window
• DNA-85801 Disable notification on instagram panel
• DNA-85809 Update instagram icon in the Sidebar Setup
• DNA-85854 Change Instagram panel size, to fit desktop version
• Complete Opera 68.0 changelog at: https://blogs.opera.com/desktop/changelog-for-68/

Update to version 67.0.3575.137

• CHR-7852 Update chromium on desktop-stable-80-3575 to 80.0.3987.163
• DNA-82540 Crash at remote_cocoa::NativeWidgetNSWindowBridge:: SetVisibilityState(remote_cocoa::mojom::WindowVisibilityState)
• DNA-84951 New PiP is completely black for some 2 GPU setups
• DNA-85284 Chrome “Open link in same tab, pop-up as tab [Free]” extension is no longer working in Opera
• DNA-85415 [Mac] Inspect Popup not working
• DNA-85530 Create API for displaying and triggering “unread” mode for messengers from in-app
• DNA-85537 Let addons.opera.com interact with sidebar messengers

Update to version 67.0.3575.115

• CHR-7833 Update chromium on desktop-stable-80-3575 to 80.0.3987.149
• DNA-74423 [Mac] Search/Copy popup stuck on top left of screen
• DNA-82975 Crash at blink::DocumentLifecycle::EnsureStateAtMost (blink::DocumentLifecycle::LifecycleState)
• DNA-83834 Crash at base::MessagePumpNSApplication:: DoRun (base::MessagePump::Delegate*)
• DNA-84632 macOS 10.15.2 fail on creating testlist.json
• DNA-84713 Switching through tabs broken when using workspaces

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.