CVE-2021-21222

Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

This update for chromium fixes the following issues:

• Chromium was updated to 90.0.4430.93 (boo#1184764,boo#1185047,boo#1185398)
  • CVE-2021-21227: Insufficient data validation in V8.
  • CVE-2021-21232: Use after free in Dev Tools.
  • CVE-2021-21233: Heap buffer overflow in ANGLE.
  • CVE-2021-21228: Insufficient policy enforcement in extensions.
  • CVE-2021-21229: Incorrect security UI in downloads.
  • CVE-2021-21230: Type Confusion in V8.
  • CVE-2021-21231: Insufficient data validation in V8.
  • CVE-2021-21222: Heap buffer overflow in V8
  • CVE-2021-21223: Integer overflow in Mojo
  • CVE-2021-21224: Type Confusion in V8
  • CVE-2021-21225: Out of bounds memory access in V8
  • CVE-2021-21226: Use after free in navigation
  • CVE-2021-21201: Use after free in permissions
  • CVE-2021-21202: Use after free in extensions
  • CVE-2021-21203: Use after free in Blink
  • CVE-2021-21204: Use after free in Blink
  • CVE-2021-21205: Insufficient policy enforcement in navigation
  • CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  • CVE-2021-21207: Use after free in IndexedDB
  • CVE-2021-21208: Insufficient data validation in QR scanner
  • CVE-2021-21209: Inappropriate implementation in storage
  • CVE-2021-21210: Inappropriate implementation in Network
  • CVE-2021-21211: Inappropriate implementation in Navigatio
  • CVE-2021-21212: Incorrect security UI in Network Config UI
  • CVE-2021-21213: Use after free in WebMIDI

This update for opera fixes the following issues:

Update to version 76.0.4017.94

• released on the stable branch

Update to version 76.0.4017.88

• CHR-8404 Update chromium on desktop-stable-90-4017 to 90.0.4430.85

• DNA-92219 Add bookmark API supports to the front-end

• DNA-92409 [MAC] ‘Present now’ options windows appear behind detached window

• DNA-92615 Capture tab from the tab context menu

• DNA-92616 Capture tab from Snapshot

• DNA-92617 Capture tab from image context menu

• DNA-92652 Opera 76 translations

• DNA-92680 Make image selector on any page work like bookmarks popup WP2

• DNA-92707 Crash at void base::ObserverList::AddObserver(class content::PrerenderHost::Observer*)

• DNA-92710 Autoupdate on macOS 11.3 not working

• DNA-92711 Make image selector on any page work like bookmarks popup WP3

• DNA-92730 Make image selector on any page work like bookmarks popup WP4

• DNA-92761 Make image selector on any page work like bookmarks popup WP5

• DNA-92776 Make image selector on any page work like bookmarks popup WP6

• DNA-92862 Make “View pinboards” button work

• DNA-92906 Provide in-house translations for Cashback strings to Spanish

• DNA-92908 API collides with oneclick installer

• The update to chromium 90.0.4430.85 fixes following issues:

  • CVE-2021-21222, CVE-2021-21223, CVE-2021-21224, CVE-2021-21225, CVE-2021-21226

• Complete Opera 76.0 changelog at: https://blogs.opera.com/desktop/changelog-for-76/

Update to version 75.0.3969.218

• CHR-8393 Update chromium on desktop-stable-89-3969 to 89.0.4389.128

• DNA-92113 Windows debug fails to compile opera_components/ipfs/ipfs/ipfs_url_loader_throttle.obj

• DNA-92198 [Arm] Update signing scripts

• DNA-92200 [Arm] Create universal packages from two buildsets

• DNA-92338 [Search tabs] The preview isn’t updated when the tab from another window is closed

• DNA-92410 [Download popup] Selected item still looks bad in dark mode

• DNA-92441 Compilation error

• DNA-92514 Allow to generate universal DMG package from existing universal .tar.xz

• DNA-92608 Opera 75 crash during rapid workspace switching

• DNA-92627 Crash at automation::Error::code()

• DNA-92630 Crash at opera::PremiumExtensionPersistentPrefStorageImpl::IsPremiumExtensionFeatureEnabled()

• DNA-92648 Amazon icon disappears from Sidebar Extensions section after pressing Hide Amazon button

• DNA-92681 Add missing string in Japanese

• DNA-92684 Fix issues with signing multiple bsids

• DNA-92706 Update repack generation from universal packages

• DNA-92725 Enable IPFS for all channels

• The update to chromium 89.0.4389.128 fixes following issues: CVE-2021-21206, CVE-2021-21220

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.