CVE-2021-37994

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

This update for chromium fixes the following issues:

Chromium 95.0.4638.54 (boo#1191844):

• CVE-2021-37981: Heap buffer overflow in Skia
• CVE-2021-37982: Use after free in Incognito
• CVE-2021-37983: Use after free in Dev Tools
• CVE-2021-37984: Heap buffer overflow in PDFium
• CVE-2021-37985: Use after free in V8
• CVE-2021-37986: Heap buffer overflow in Settings
• CVE-2021-37987: Use after free in Network APIs
• CVE-2021-37988: Use after free in Profiles
• CVE-2021-37989: Inappropriate implementation in Blink
• CVE-2021-37990: Inappropriate implementation in WebView
• CVE-2021-37991: Race in V8
• CVE-2021-37992: Out of bounds read in WebAudio
• CVE-2021-37993: Use after free in PDF Accessibility
• CVE-2021-37996: Insufficient validation of untrusted input in Downloads
• CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
• CVE-2021-37995: Inappropriate implementation in WebApp Installer

This update for chromium fixes the following issues:

Chromium 95.0.4638.54 (boo#1191844):

• CVE-2021-37981: Heap buffer overflow in Skia
• CVE-2021-37982: Use after free in Incognito
• CVE-2021-37983: Use after free in Dev Tools
• CVE-2021-37984: Heap buffer overflow in PDFium
• CVE-2021-37985: Use after free in V8
• CVE-2021-37986: Heap buffer overflow in Settings
• CVE-2021-37987: Use after free in Network APIs
• CVE-2021-37988: Use after free in Profiles
• CVE-2021-37989: Inappropriate implementation in Blink
• CVE-2021-37990: Inappropriate implementation in WebView
• CVE-2021-37991: Race in V8
• CVE-2021-37992: Out of bounds read in WebAudio
• CVE-2021-37993: Use after free in PDF Accessibility
• CVE-2021-37996: Insufficient validation of untrusted input in Downloads
• CVE-2021-37994: Inappropriate implementation in iFrame Sandbox
• CVE-2021-37995: Inappropriate implementation in WebApp Installer

This update for opera fixes the following issues:

Opera was updated to version 81.0.4196.31

• DNA-95733 Implement the “Manage” menu in card details view

• DNA-95736 Update UI for paused card

• DNA-95791 Crash at base::operator<

• DNA-95794 Sometimes the sidebar UI fails to load

• DNA-95812 Retrieve cards info when showing autofill

• DNA-96035 Cannot create virtual card on Sandbox environment

• DNA-96147 “Buy” button does not work

• DNA-96168 Update contributors list

• DNA-96211 Enable #fast-tab-tooltip on all streams

• DNA-96231 Promote O81 to stable

• Complete Opera 80.1 changelog at:

  https://blogs.opera.com/desktop/changelog-for-81/

Update to version 81.0.4196.27

• CHR-8623 Update chromium on desktop-stable-95-4196 to 95.0.4638.54
• DNA-92384 Better segmenting of hint users
• DNA-95523 Allow sorting in multi-card view
• DNA-95659 Flow of Lastcard on first login
• DNA-95735 Implement the button that reveals full card details
• DNA-95747 Better way to handle expired funding card
• DNA-95949 [Mac Retina] Clicking active tab should scroll to the top
• DNA-95993 Update icon used for Yat in address bar dropdown
• DNA-96021 Cleared download item view is never deleted
• DNA-96036 Occupation field in 'Account – Edit' is shown twice
• DNA-96127 Upgrade plan button does nothing
• DNA-96138 'Add Card' button does not change to 'Upgrade Plan' after adding card
• The update to chromium 95.0.4638.54 fixes following issues: CVE-2021-37981, CVE-2021-37982, CVE-2021-37983, CVE-2021-37984, CVE-2021-37985, CVE-2021-37986, CVE-2021-37987, CVE-2021-37988, CVE-2021-37989, CVE-2021-37990, CVE-2021-37991, CVE-2021-37992, CVE-2021-37993, CVE-2021-37994, CVE-2021-37995, CVE-2021-37996

Update to version 80.0.4170.72

• DNA-95522 Change card view to show all types of cards
• DNA-95523 Allow sorting in multi-card view
• DNA-95524 Allow searching for cards by name
• DNA-95658 Allow user to add a card
• DNA-95659 Flow of Lastcard on first login
• DNA-95660 Implement editing card details
• DNA-95699 Add card details view
• DNA-95733 Implement the “Manage” menu in card details view
• DNA-95735 Implement the button that reveals full card details
• DNA-95736 Update UI for paused card
• DNA-95747 Better way to handle expired funding card
• DNA-95794 Sometimes the sidebar UI fails to load
• DNA-95812 Retrieve cards info when showing autofill
• DNA-96036 Occupation field in ‘Account – Edit’ is shown twice
• DNA-96127 Upgrade plan button does nothing
• DNA-96138 “Add Card” button does not change to “Upgrade Plan” after adding card

This update for opera fixes the following issues:

Update to version 81.0.4196.31:

• DNA-95733 Implement the “Manage” menu in card details view
• DNA-95736 Update UI for paused card
• DNA-95791 Crash at base::operator<
• DNA-95794 Sometimes the sidebar UI fails to load
• DNA-95812 Retrieve cards info when showing autofill
• DNA-96035 Cannot create virtual card on Sandbox environment
• DNA-96147 “Buy” button does not work
• DNA-96168 Update contributors list
• DNA-96211 Enable #fast-tab-tooltip on all streams
• DNA-96231 Promote O81 to stable
• Complete Opera 80.1 changelog at: https://blogs.opera.com/desktop/changelog-for-81/

Update to version 81.0.4196.27

• CHR-8623 Update chromium on desktop-stable-95-4196 to 95.0.4638.54
• DNA-92384 Better segmenting of hint users
• DNA-95523 Allow sorting in multi-card view
• DNA-95659 Flow of Lastcard on first login
• DNA-95735 Implement the button that reveals full card details
• DNA-95747 Better way to handle expired funding card
• DNA-95949 [Mac Retina] Clicking active tab should scroll to the top
• DNA-95993 Update icon used for Yat in address bar dropdown
• DNA-96021 Cleared download item view is never deleted
• DNA-96036 Occupation field in 'Account – Edit' is shown twice
• DNA-96127 Upgrade plan button does nothing
• DNA-96138 'Add Card' button does not change to 'Upgrade Plan' after adding card
• The update to chromium 95.0.4638.54 fixes following issues: CVE-2021-37981, CVE-2021-37982, CVE-2021-37983, CVE-2021-37984, CVE-2021-37985, CVE-2021-37986, CVE-2021-37987, CVE-2021-37988, CVE-2021-37989, CVE-2021-37990, CVE-2021-37991, CVE-2021-37992, CVE-2021-37993, CVE-2021-37994, CVE-2021-37995, CVE-2021-37996

Update to version 80.0.4170.72

• DNA-95522 Change card view to show all types of cards
• DNA-95523 Allow sorting in multi-card view
• DNA-95524 Allow searching for cards by name
• DNA-95658 Allow user to add a card
• DNA-95659 Flow of Lastcard on first login
• DNA-95660 Implement editing card details
• DNA-95699 Add card details view
• DNA-95733 Implement the “Manage” menu in card details view
• DNA-95735 Implement the button that reveals full card details
• DNA-95736 Update UI for paused card
• DNA-95747 Better way to handle expired funding card
• DNA-95794 Sometimes the sidebar UI fails to load
• DNA-95812 Retrieve cards info when showing autofill
• DNA-96036 Occupation field in ‘Account – Edit’ is shown twice
• DNA-96127 Upgrade plan button does nothing
• DNA-96138 “Add Card” button does not change to “Upgrade Plan” after adding card

This update for opera fixes the following issues:

Update to 85.0.4341.28

• CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84

• DNA-98092 Crash at views::MenuItemView::GetMenuController()

• DNA-98278 Translations for O85

• DNA-98320 [Mac] Unable to delete recent search entries

• DNA-98614 Show recent searches for non-BABE users

• DNA-98615 Allow removal of recent searches

• DNA-98616 Add recent searches to ‘old’ BABE

• DNA-98617 Make it possible to disable ad-blocker per-country

• DNA-98651 Remove Instagram and Facebook Messenger in Russia

• DNA-98653 Add flag #recent-searches

• DNA-98696 smoketest PageInfoHistoryDataSourceTest.FormatTimestampString failing

• DNA-98703 Port Chromium issue 1309225 to Opera Stable

• The update to chromium 99.0.4844.84 fixes following issues:
  CVE-2022-1096

• Changes in 85.0.4341.18

  • CHR-8789 Update chromium on desktop-stable-99-4341 to 99.0.4844.51
  • DNA-98059 [Linux] Crash at opera::FreedomSettingsImpl::IsBypassForDotlessDomainsEnabled
  • DNA-98349 [Linux] Crash at bluez::BluezDBusManager::Get()
  • DNA-98126 System crash dialog shown on macOS <= 10.15
  • DNA-98331 [Snap] Meme generator cropping / resizing broken
  • DNA-98394 Audio tab indicator set to 'muted' on videoconferencing sites
  • DNA-98481 Report errors in opauto_collector

• The update to chromium 99.0.4844.51 fixes following issues: CVE-2022-0789, CVE-2022-0790, CVE-2022-0791, CVE-2022-0792, CVE-2022-0793, CVE-2022-0794, CVE-2022-0795, CVE-2022-0796, CVE-2022-0797, CVE-2022-0798, CVE-2022-0799, CVE-2022-0800, CVE-2022-0801, CVE-2022-0802, CVE-2022-0803, CVE-2022-0804, CVE-2022-0805, CVE-2022-0806, CVE-2022-0807, CVE-2022-0808, CVE-2022-0809

• Changes in 85.0.4341.13

  • DNA-94119 Upgrade curl to 7.81.0
  • DNA-97849 [Mac monterey] System shortcut interfere with Opera’s ToggleSearchInOpenTabs shortcut
  • DNA-98204 Automatic popout happens when video is paused
  • DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears
  • DNA-98321 Add thinlto-cache warnings to suppression list
  • DNA-98395 Promote O85 to stable

• Complete Opera 85.0 changelog at: https://blogs.opera.com/desktop/changelog-for-85/

• Update to 84.0.4316.42

  • DNA-94119 Upgrade curl to 7.81.0
  • DNA-98092 Crash at views::MenuItemView::GetMenuController()
  • DNA-98204 Automatic popout happens when video is paused
  • DNA-98231 Shortcuts are blocked by displayed tab tooltip when triggered quickly after tooltip appears

• Update to 84.0.4316.31

  • CHR-8772 Update chromium on desktop-stable-98-4316 to 98.0.4758.109
  • DNA-97573 [Win][Lin]”Close tab” button is not displayed on tabs playing media when many tabs are open
  • DNA-97729 cancelling the process uploading custom Wallpaper crashes the browser
  • DNA-97871 Google meet tab’s icons don’t fit on pinned tab
  • DNA-97872 Tab is being unpinned when video conferencing button is clicked
  • DNA-98039 Dark theme top sites have black background
  • DNA-98117 Clicking current tab information should hide tooltip

• Update to 84.0.4316.21

  • CHR-8762 Update chromium on desktop-stable-98-4316 to 98.0.4758.102
  • DNA-97333 ‘Add a site’ label on start page tile barely visible
  • DNA-97691 Opera 84 translations
  • DNA-97767 Wrong string in FR
  • DNA-97855 Crash at ScopedProfileKeepAlive::~ScopedProfileKeepAlive()
  • DNA-97982 Enable #snap-upstream-implementation on all streams

• The update to chromium 98.0.4758.102 fixes following issues: CVE-2022-0603, CVE-2022-0604, CVE-2022-0605, CVE-2022-0606, CVE-2022-0607, CVE-2022-0608, CVE-2022-0609, CVE-2022-0610

• Update to 84.0.4316.14

  • CHR-8753 Update chromium on desktop-stable-98-4316 to 98.0.4758.82
  • DNA-97177 Battery saver – the icon looks bad for DPI!=100%
  • DNA-97614 automatic video pop-out for most popular websites broadcasting Winter Olympic Games…

These are all security issues fixed in the chromedriver-95.0.4638.54-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.