CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

This update for chromium fixes the following issues:

Chromium 110.0.5481.77 (boo#1208029):

• CVE-2023-0696: Type Confusion in V8
• CVE-2023-0697: Inappropriate implementation in Full screen mode
• CVE-2023-0698: Out of bounds read in WebRTC
• CVE-2023-0699: Use after free in GPU
• CVE-2023-0700: Inappropriate implementation in Download
• CVE-2023-0701: Heap buffer overflow in WebUI
• CVE-2023-0702: Type Confusion in Data Transfer
• CVE-2023-0703: Type Confusion in DevTools
• CVE-2023-0704: Insufficient policy enforcement in DevTools
• CVE-2023-0705: Integer overflow in Core
• Various fixes from internal audits, fuzzing and other initiatives

• build with bundled libavif

This update for opera fixes the following issues:

Update to 96.0.4693.20

• CHR-9191 Update Chromium on desktop-stable-110-4693 to 110.0.5481.78
• CHR-9197 Update Chromium on desktop-stable-110-4693 to 110.0.5481.100
• DNA-105308 Translations for O96
• DNA-105395 Fix missing resources errors on About and Update & Recovery pages

• Complete Opera 96.0 changelog at: https://blogs.opera.com/desktop/changelog-for-96/

• The update to chromium 110.0.5481.78 fixes following issues: CVE-2023-0696, CVE-2023-0697, CVE-2023-0698, CVE-2023-0699, CVE-2023-0700, CVE-2023-0701, CVE-2023-0702, CVE-2023-0703, CVE-2023-0704, CVE-2023-0705

Update to 95.0.4635.46

• DNA-104601 Crash at opera::EasyShareButtonControllerTabHelper::StartOnboarding()
• DNA-104936 Set new Baidu search string
• DNA-105084 Prepare to turning on 'Rich entities'

Update to 95.0.4635.37

• DNA-104366 Turn #speed-dial-custom-image on developer
• DNA-104370 Pictures in news don’t show
• DNA-104384 [News] Change News to be disabled by default
• DNA-104393 [Continue on] Weird look of item counter in collapsed Continue shopping after refreshing page
• DNA-104394 [Continue on] Continue shopping show up collapsed
• DNA-104421 Mechanism to detect installed player
• DNA-104439 Merge with GX implementation
• DNA-104492 [Stable A/B Test] React Start Page for Austria 50%
• DNA-104523 [Add to Opera][Folders][Edit] Black font on dark background in modals when light theme with dark wallpaper is selected
• DNA-104525 [Choose language and country] Modal does not adapt when wallpaper does not match theme
• DNA-104609 [SD][Folders] Incorrect order of tiles in folder when merging folder with single tile
• DNA-104612 [News] Invisible button in news category.
• DNA-104614 Do not allow to create folder with the same name to prevent automerging
• DNA-104898 [Edit tile] Adjust icon size of tile in edit-form-modal

This update for opera fixes the following issues:

• Update to 99.0.4788.13

  • CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127
  • DNA-107317 __delayLoadHelper2 crash in crashreporter

• The update to chromium 113.0.5672.127 fixes following issues: CVE-2023-2721, CVE-2023-2722, CVE-2023-2723, CVE-2023-2724, CVE-2023-2725, CVE-2023-2726

• Update to 99.0.4788.9

  • CHR-9283 Update Chromium on desktop-stable-113-4788 to 113.0.5672.93
  • DNA-107638 Translations for O99
  • DNA-107678 Crash Report [@ BrowserContextKeyedServiceFactory:: BrowserContextKeyedServiceFactory(char const*, BrowserContextDependencyManager*) ]
  • DNA-107795 Fix wrong german translation of 'Close All Duplicate Tabs'
  • DNA-107800 Fonts on section#folder and AddSitePanel not readable when animated wallpaper chosen
  • DNA-107840 Promote O99 to stable

• Update to 98.0.4759.39

  • DNA-102363 ChromeFileSystemAccessPermissionContextTest. ConfirmSensitiveEntryAccess_DangerousFile fails
  • DNA-105534 [Add to Opera] Incorrect scroll on modal when browser window size is too small
  • DNA-106649 Opening new tab when pinned tab is active gives 2 active tabs
  • DNA-107226 Speed Dial freezes and empty space remains after Continue booking tile dragging
  • DNA-107435 Building archive_source_release target fails
  • DNA-107441 [Start page] Right mouse click on tile in continue on section opens target site in current tab
  • DNA-107508 Crash at permissions::PermissionRecoverySuccessRate Tracker::TrackUsage(ContentSettingsType)
  • DNA-107528 Handle real-time SD impression reporting
  • DNA-107546 Context menus broken with one workspace
  • DNA-107548 Paste from Context Menu doesn’t work for Search on StartPage
  • DNA-107560 Optimize real-time SD impression reporting

These are all security issues fixed in the chromedriver-110.0.5481.77-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

It was discovered that Chromium did not properly manage memory. A remote attacker could possibly use these issues to cause a denial of service or execute arbitrary code via a crafted HTML page. (CVE-2023-0471, CVE-2023-0472, CVE-2023-0473, CVE-2023-0696, CVE-2023-0698, CVE-2023-0699, CVE-2023-0702, CVE-2023-0705)

It was discovered that Chromium did not properly manage memory. A remote attacker who convinced a user to install a malicious extension could possibly use this issue to corrupt memory via a Chrome web app. (CVE-2023-0474)

It was discovered that Chromium contained an inappropriate implementation in the Download component. A remote attacker could possibly use this issue to spoof contents of the Omnibox (URL bar) via a crafted HTML page. (CVE-2023-0700)

It was discovered that Chromium did not properly manage memory. A remote attacker who convinced a user to engage in specific UI interactions could possibly use these issues to cause a denial of service or execute arbitrary code. (CVE-2023-0701, CVE-2023-0703)

It was discovered that Chromium insufficiently enforced policies. A remote attacker could possibly use this issue to bypass same origin policy and proxy settings via a crafted HTML page. (CVE-2023-0704)