OPENSUSE-SU-2025:0111-1

Vulnerability from csaf_opensuse - Published: 2025-03-31 22:46 - Updated: 2026-09-20 21:23
Summary
Security update for opera
Severity
Important
Notes
Title of the patch: Security update for opera
Description of the patch: This update for opera fixes the following issues: - Update to 117.0.5408.163 * DNA-120683 [Issue back] Sometimes onboarding is blank and useless * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133, GX132 and Air132 - Changes in 117.0.5408.154 * DNA-121210 After enabling tab scrolling, the tab bar narrows on both the left and right sides * DNA-121560 Extension updates which requires manual confirmation do not work - Changes in 117.0.5408.142 * DNA-121314 Use the extra palette color to paint the frame * DNA-121321 Refactor ColorSet struct * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl * DNA-121477 Add unit tests for ColorSet * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails - Changes in 117.0.5408.93 * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page (SP), the focus should be on the search bar * DNA-121183 Add 'transparent UI' parameter to Vibe logic * DNA-121184 Allow to specify extra palette for window background in Vibe logic * DNA-121232 Enable Slack, Discord and Bluesky flag on all streams * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position * DNA-121322 [Opera Translate] [Redesign] Expired #translator flag * DNA-121385 Remove 'passkey' string - Update to 117.0.5408.53 * DNA-120848 Add 'x' button to close/dismiss translate popup * DNA-120849 Dismissing popup adds language to never translate from list * DNA-120951 Optimize MFSVE output handling * DNA-120972 Crash at TabDesktopMediaList::Refresh * CHR-9964 Update Chromium on desktop-stable-132-5408 to 132.0.6834.210 Changes in 117.0.5408.47 * CHR-9961 Update Chromium on desktop-stable-132-5408 to 132.0.6834.209
Patchnames: openSUSE-2025-111
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2025-2783
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 15.6 NonFree:opera-0:117.0.5408.163-lp156.2.32.1.x86_64 —
Vendor Fix
Threats
Impact important
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opera",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opera fixes the following issues:\n\n- Update to 117.0.5408.163\n  * DNA-120683 [Issue back] Sometimes onboarding is blank\n    and useless\n  * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133,\n    GX132 and Air132\n- Changes in 117.0.5408.154\n  * DNA-121210 After enabling tab scrolling, the tab bar narrows\n    on both the left and right sides\n  * DNA-121560 Extension updates which requires manual\n    confirmation do not work\n- Changes in 117.0.5408.142\n  * DNA-121314 Use the extra palette color to paint the frame\n  * DNA-121321 Refactor ColorSet struct\n  * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl\n  * DNA-121477 Add unit tests for ColorSet\n  * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails\n- Changes in 117.0.5408.93\n  * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page \n    (SP), the focus should be on the search bar\n  * DNA-121183 Add \u0027transparent UI\u0027 parameter to Vibe logic\n  * DNA-121184 Allow to specify extra palette for window\n    background in Vibe logic\n  * DNA-121232 Enable Slack, Discord and Bluesky flag on\n    all streams\n  * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position\n  * DNA-121322 [Opera Translate] [Redesign] Expired #translator\n    flag\n  * DNA-121385 Remove \u0027passkey\u0027 string\n\n- Update to 117.0.5408.53\n  * DNA-120848 Add \u0027x\u0027 button to close/dismiss translate popup\n  * DNA-120849 Dismissing popup adds language to never translate\n    from list\n  * DNA-120951 Optimize MFSVE output handling\n  * DNA-120972 Crash at TabDesktopMediaList::Refresh\n  * CHR-9964 Update Chromium on desktop-stable-132-5408 to\n    132.0.6834.210\nChanges in 117.0.5408.47\n  * CHR-9961 Update Chromium on desktop-stable-132-5408 to\n    132.0.6834.209\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2025-111",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_0111-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2025:0111-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJEX6ZT5W5GYLZEQIA7L2J32HG4KGMAX/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2025:0111-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJEX6ZT5W5GYLZEQIA7L2J32HG4KGMAX/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-2783 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-2783/"
      }
    ],
    "title": "Security update for opera",
    "tracking": {
      "current_release_date": "2026-09-20T21:23:55Z",
      "generator": {
        "date": "2025-03-31T22:46:48Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:0111-1",
      "initial_release_date": "2025-03-31T22:46:48Z",
      "revision_history": [
        {
          "date": "2025-03-31T22:46:48Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T21:23:55Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opera-0:117.0.5408.163-lp156.2.32.1.x86_64",
                "product": {
                  "name": "opera-0:117.0.5408.163-lp156.2.32.1.x86_64",
                  "product_id": "opera-0:117.0.5408.163-lp156.2.32.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/opera@117.0.5408.163-lp156.2.32.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.6 NonFree",
                "product": {
                  "name": "openSUSE Leap 15.6 NonFree",
                  "product_id": "openSUSE Leap 15.6 NonFree"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opera-0:117.0.5408.163-lp156.2.32.1.x86_64 as component of openSUSE Leap 15.6 NonFree",
          "product_id": "openSUSE Leap 15.6 NonFree:opera-0:117.0.5408.163-lp156.2.32.1.x86_64"
        },
        "product_reference": "opera-0:117.0.5408.163-lp156.2.32.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.6 NonFree"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-2783",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-2783"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 15.6 NonFree:opera-0:117.0.5408.163-lp156.2.32.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-2783",
          "url": "https://www.suse.com/security/cve/CVE-2025-2783"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1240084 for CVE-2025-2783",
          "url": "https://bugzilla.suse.com/1240084"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 15.6 NonFree:opera-0:117.0.5408.163-lp156.2.32.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-03-31T22:46:48Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-2783"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.