{"id":"openSUSE-SU-2020:2178-1","summary":"Security update for opera","details":"This update for opera fixes the following issues:\n\n- Update to version 72.0.3815.400\n  - DNA-88996 [Mac] Vertical spacing of sidebar items incorrect\n  - DNA-89698 [Mac] text on bookmark bar not visible when\n    application is not focused\n  - DNA-89746 Add product-name switch to Opera launcher and\n    installer\n  - DNA-89779 Implement multi-window behavior for pinned Player\n  - DNA-89924 Music continue to play after the disabling Player\n    from Sidebar\n  - DNA-89994 Fix progress bar shape and color\n  - DNA-89995 Fix font sizes, weights and colors of text in\n    control panel\n  - DNA-90010 Payment Methods in Settings mention Google account\n  - DNA-90022 [Mac][BigSur] Crash at -[BrowserWindowController\n    window:willPositionSheet:usingRect:]\n  - DNA-90025 Player stays in the autopause after reloading\n    panel – part 2\n  - DNA-90096 Sidebar click stat not collected for Player\n  - DNA-90143 Adding a stat for Player sidebar clicks to the\n    Avro schema\n\n- Update to version 72.0.3815.378\n  - CHR-8192 Update chromium on desktop-stable-86-3815 to\n    86.0.4240.198\n  - DNA-86550 XHRUint8Array test time out\n  - DNA-88631 Unintended volume drop\n  - DNA-88708 [Snap] Inproper area snapped\n  - DNA-88726 [Mac] Overlay ‘pause’ icon when Opera auto-pauses\n    the Player\n  - DNA-88903 Detach video button should not be visible\n  - DNA-88938 Make home page reflect service configuration\n  - DNA-88943 Learn more link on home page doesnt work\n  - DNA-88944 Apple Music service slow to open\n  - DNA-88948 Fetch audio focus request id from MediaSession\n  - DNA-88949 Detach video button missing\n  - DNA-88966 No accessiblity titles for services icons in home page\n  - DNA-88967 Investigate creating a single BrowserSidebarModel\n    instance\n  - DNA-88995 Overlay “pause” is displayed when it shouldn’t\n  - DNA-89017 Error when signing out of YouTube Music\n  - DNA-89054 Audio is not resumed when muting audio in tab\n  - DNA-89094 DCHECK when pressing Reload button\n  - DNA-89095 Manage service data through PlayerService\n  - DNA-89100 [Player] Crash – many scenarios\n  - DNA-89187 Reload button doesn’t work properly\n  - DNA-89189 Update icons and buttons\n  - DNA-89217 Enable #player-service on developer stream\n  - DNA-89220 SidebarCarouselTests.* failing\n  - DNA-89230 Crash at v8::Context::Enter()\n  - DNA-89244 Define default widths per service\n  - DNA-89245 Improve Spotify logo layout in home page buttons\n  - DNA-89248 Crash at opera::WebPageBrowserSidebarItemContentViewViews\n    ::UpdatePlayerService()\n  - DNA-89278 [Sidebar] No notification for downloads and workspaces\n  - DNA-89285 [Engine] Unable to launch skype with Opera\n  - DNA-89292 Do not block page loads waiting for sitecheck data\n  - DNA-89316 Should be able to navigate directly to playerServices\n    section in settings\n  - DNA-89339 Make popup appear with tooltip-like behavior\n  - DNA-89340 Implement control panel looks in light and dark mode\n  - DNA-89341 Make the control panel buttons work\n  - DNA-89342 Add support for the DNA to the rollout system\n  - DNA-89344 Show Music Service icon in the control panel\n  - DNA-89360 Make ‘Settings’ menu entry go to settings\n  - DNA-89366 Make opera://feedback/babe attachable by the webdriver\n  - DNA-89419 Crash at base::Value::GetAsDictionary\n    (base::DictionaryValue const**) const\n  - DNA-89469 Autopause does not work\n  - DNA-89477 Do not wait with starting the player if the\n    interrupting session is short\n  - DNA-89480 Crash when hovering player panel\n  - DNA-89484 Crash at base::internal::CheckedObserverAdapter\n    ::IsMarkedForRemoval()\n  - DNA-89489 Put control panel behind feature flag\n  - DNA-89514 Implement feedback button for Player\n  - DNA-89516 Do not auto-pause the Player when there is no sound\n  - DNA-89553 Make the control panel show current song\n  - DNA-89557 No accessibility title for rating and close buttons\n    inside feedback dialog\n  - DNA-89561 Make the control panel show artwork that represents\n    current track\n  - DNA-89575 Handle longer track and artist names\n  - DNA-89577 Make progress bar work correctly\n  - DNA-89630 Controler pop-up is too high (and service logo too)\n  - DNA-89634 Panel width is reset when it shouldn’t\n  - DNA-89654 Request higher resolution images for HiDPI\n  - DNA-89655 Enable #player-service-control-panel on Developer stream\n  - DNA-89671 No accessiblity titles for control panel elements\n  - DNA-89672 String change “A world of music…”\n  - DNA-89679 Player — don’t show control panel when Player in sidebar\n    is opened\n  - DNA-89722 Album cover arts are not visible\n  - DNA-89766 Address bar does not respond to actions\n  - DNA-89776 Control panel does not disappear after hovering elsewhere\n  - DNA-89778 Implement multi-window behavior when no Player is pinned\n  - DNA-89795 Player is enable after Opera restart\n    (when in Settings was turned off)\n  - DNA-89803 Artwork is cropped to the right\n  - DNA-89812 Sidebar panel should hide when toggle between windows\n  - DNA-89820 Incorrect music services for Philippines\n  - DNA-89846 Do not show the control panel if there is nothing to\n    show\n  - DNA-89878 Clarify notification dot for messengers\n  - DNA-89901 [Mac][Player] Zombie crash at exit\n  - DNA-89952 Crash at opera::BrowserSidebarPlayerItemContentViewViews\n    ::LoadPlayerServiceURL()\n  - DNA-89964 Player stays in the autopause after reloading panel\n  - DNA-89971 Multi window behaviour is not respected anymore\n  - DNA-89976 Disallow docking for Player\n  - DNA-89986 Enable #player-service and\n    #player-service-control-panel on all streams\n  - DNA-90006 Change services order in RU/UA/BY\n- The update to chromium 86.0.4240.198 fixes following issues:\n  CVE-2020-16013, CVE-2020-16017\n","modified":"2026-03-11T07:32:49.324224Z","published":"2020-12-06T17:22:42Z","related":["CVE-2020-16013","CVE-2020-16017"],"upstream":["CVE-2020-16013","CVE-2020-16017"],"references":[{"type":"ADVISORY","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELOCKFRXJEKGKGO7AQH4WNPKH7IYSMSR/"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-16013"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-16017"}],"affected":[{"package":{"name":"opera","ecosystem":"openSUSE:Leap 15.1 NonFree","purl":"pkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.1%20NonFree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.0.3815.400-lp152.2.24.1"}]}],"ecosystem_specific":{"binaries":[{"opera":"72.0.3815.400-lp152.2.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:2178-1.json"}},{"package":{"name":"opera","ecosystem":"openSUSE:Leap 15.2 NonFree","purl":"pkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.2%20NonFree"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"72.0.3815.400-lp152.2.24.1"}]}],"ecosystem_specific":{"binaries":[{"opera":"72.0.3815.400-lp152.2.24.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2020:2178-1.json"}}],"schema_version":"1.7.5"}