{"answers":{"affected":"","exploited":"There is no known exploitation of openSUSE-SU-2020:0402-1 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"openSUSE-SU-2020:0402-1 is a memory corruption vulnerability in opera, published on 29 Mar 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for openSUSE-SU-2020:0402-1 and fix it if it is affected.\n\nWhat it is: openSUSE-SU-2020:0402-1 is a memory corruption vulnerability in opera, published on 29 Mar 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of openSUSE-SU-2020:0402-1 in the wild and no public exploit code.\n\nAffected product: opera. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/openSUSE-SU-2020-0402-1/ (Markdown: https://insights.sbomify.com/openSUSE-SU-2020-0402-1/index.md)","id":"openSUSE-SU-2020:0402-1","markdown":"https://insights.sbomify.com/openSUSE-SU-2020-0402-1/index.md","name":"openSUSE-SU-2020:0402-1","record":{"aliases":[],"analysis":{"component_type":"browser","fix_type":"upgrade","impacts":["code_execution","denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Opera browser","requires_auth":"none","summary":"An attacker can exploit memory corruption flaws in the Opera browser to execute arbitrary code or cause a denial of service via crafted web content.","user_interaction":"required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"This update for opera fixes the following issues:\n\nUpdate to version 67.0.3575.97\n\n- DNA-84063 Open URL in new tab with ‘Go to web address’ in\n  search/copy popup and right mouse click context menu\n- DNA-84780 Search in Search and Copy popup opens tab in wrong\n  position from popup window\n- DNA-84786 Crash at Browser::PasteAndGo(std::__1::basic_string\n  const\u0026, WindowOpenDisposition)\n- DNA-84815 Crash at TabStripModel::GetIndexOfWebContents\n  (content::WebContents const*)\n- DNA-84937 [Mac] Workspace switching is slow with a lot of\n  tabs opened\n- DNA-85159 Sidebar-setup not refreshed correctly after\n  signing out from sync\n\nUpdate to version 67.0.3575.79\n\n- CHR-7804 Update chromium on desktop-stable-80-3575 to\n  80.0.3987.132\n- DNA-83766 Opera Ad Blocker extension state is not updated when\n  changing it\n- DNA-83966 Enable kFeatureSuggestionScoringImproved on all the\n  streams\n- DNA-84159 Settings – list of workspaces in the settings isn’t\n  updated after reordering\n- DNA-84396 Inline autocomplete not working when SD becomes\n  the top-scored suggestion\n- DNA-84711 Wrong autocomplete address for https sites\n- DNA-84741 No amazon partner extension displayed\n- DNA-84743 Crash at ExtensionsToolbarContainer::UndoPopOut()\n- DNA-84776 Bookmarks not fully displayed in Bookmarks Panel\n- DNA-84817 Crash at Browser::IsSearchAndCopyPopupEnabled()\n- DNA-84836 Broken video playback in some cases\n- DNA-84837 Audio decoder broken although available on Windows 7\n- DNA-84860 [Mac] Address field not highlighted on hover\n- DNA-84889 [desktop-stable-80-3575] There’re no basic settings\n- DNA-84910 Fix output type selection of SW H.264 decoder\n- DNA-84938 Prepare stable build with Yx 05 edition\n- DNA-84969 Address bar dropdown launches HTTP GETs for every\n  autocomplete\n\nUpdate to version 67.0.3575.53\n\n- CHR-7792 Update chromium on desktop-stable-80-3575 \n  to 80.0.3987.122\n- DNA-84024 ‘Save all Tabs in Speed Dial Folder’ doesn’t work\n  on main context menu\n- DNA-84056 Submenus are not scrollable\n- DNA-84061 Expanded bookmark menu overlaps the whole toolbar\n- DNA-84277 Whole text should be visible\n- DNA-84412 Dragging tab to different place activates another tab\n- DNA-84492 Disable any notifications for “default browser”\n  from sweetlabs builds\n- DNA-84691 Crash when trying to open sidebar context menu\n\n- Update to version 67.0.3575.31\n- DNA-84077 Hide seek and timer controls in video pop-out\n  for YouTube live streams\n- DNA-84639 Promote O67 to stable\n- Complete Opera 67.0 changelog at: https://blogs.opera.com/desktop/changelog-for-67/\n\nUpdate to version 66.0.3515.103\n\n- DNA-83528 UnpackTest.CanUnpackTarXzFile test fails on OSX 10.15+\n- DNA-83568 Add test driver perftests\n- DNA-84335 [Linux] Widevine is not working due to changed \n  path of libwidevinecdm.so\n- DNA-84439 Opera extensions update requests are sent to chrome\n  instead of opera servers\n\nUpdate to version 66.0.3515.72\n\n- DNA-79691 Unable to play video on Netflix right after Opera \n  installation\n- DNA-82102 Wrong cursor and X color of the search fields on \n  Bookmark/History sidebar panels\n- DNA-82722 Google Translator blocks PDF viewer\n- DNA-83407 Crash at static void \n  `anonymous namespace”::PureCall()\n- DNA-83530 Bad colors in Personal news when dark theme turned on\n- DNA-83531 Dragging speed dial root folders in bookmarks\n  sidebar makes duplicates\n- DNA-83542 Fix background tabs loading issues\n- DNA-83806 Crash at opera::RichHintDisplayHandlerViews::\n  OnWidgetDestroying(views::Widget*)\n- DNA-83882 Crash at base::Value::Clone()\n- DNA-84007 Accessibility elements visible on pages after\n  first navigation on Mac\n\nUpdate to version 66.0.3515.44\n\n- CHR-7734 Update chromium on desktop-stable-79-3515 \n  to 79.0.3945.130\n- DNA-82635 [Mac] Fix crash when opening power save popup twice\n- DNA-83587 Fix Crash at\n  opera::ThumbnailHelper::ThumbnailRequest::PopNextFrameToPaint()\n- DNA-83698 Unregister extensions keybindings when sidebar\n  is hidden\n- DNA-83757 Stop making thumbnail after history onboarding\n  will show\n\nUpdate to version 66.0.3515.36\n\n- CHR-7717 Update chromium on desktop-stable-79-3515 \n  to 79.0.3945.117\n- DNA-81359 Translate “Speed Dials” folder in bookmarks panel\n- DNA-82627 Unify \u0026 streamline tooltip color processing \n  across Opera.\n- DNA-82800 Enable \n  kFeatureTurnOnFeaturesDownloadedByInstallerOnUpdates on \n  all streams\n- DNA-83190 Record SwitchToFullSite events on icon clicks.\n- DNA-83496 Check if history-panel is enabled before showing \n  onboarding.\n- DNA-83545 Fix a crash in adblocker rule update\n- DNA-83583 [Mac] Bookmark popup too bright in dark mode\n- DNA-83608 Set “plat” metadata in crash reports from Linux.\n\nUpdate to version 66.0.3515.27\n\n- DNA-82683 Bookmarks menu is not readable in dark mode \n  after hovering\n- DNA-83139 [macOS] screenshot is resized\n- DNA-83204 [Mac] Anchor onboarding widget to history \n  icon on sidebar\n- DNA-83205 [Mac] Popup looks bad with mode change\n- DNA-83351 Enable feature on stable/beta\n- DNA-83366 [Mac] Onboarding popup doesn’t follow the browser \n  window\n- DNA-83402 Promote O66 to stable\n- Complete Opera 66.0 changelog at:\nhttps://blogs.opera.com/desktop/changelog-for-66/\n\nUpdate to version 65.0.3467.69\n\n- DNA-82647 Tab icons mixed after Tab closing\n- DNA-82919 Update wrapper to skip package types when \n  creating repo\n- DNA-82967 [Mac] Opera crashes on dragging the SSL icon \n  on the URL Bar","ecosystems":["openSUSE:Leap 15.1 NonFree"],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":true,"headline":"Security update for opera","id":"openSUSE-SU-2020:0402-1","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":null,"product":null,"products":[],"type":"memory_corruption","year":"2020"},"n_packages":1,"n_references":null,"packages":[{"ecosystem":"openSUSE:Leap 15.1 NonFree","fixed":["67.0.3575.97-lp151.2.12.1"],"introduced":["0"],"last_affected":[],"package":"opera","purl":"pkg:rpm/opensuse/opera\u0026distro=openSUSE%20Leap%2015.1%20NonFree","source":"openSUSE-SU-2020:0402-1"}],"products":null,"published":"2020-03-29","related":[],"sources":[{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"openSUSE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"An attacker can exploit memory corruption flaws in the Opera browser to execute arbitrary code or cause a denial of service via crafted web content.","url":"https://insights.sbomify.com/openSUSE-SU-2020-0402-1/"}