openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0265-1 Rating: important References: Cross-References: CVE-2025-4664 CVE-2025-5419 Affected Products: openSUSE Leap 15.6:NonFree ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for opera fixes the following issues: - Update to 120.0.5543.61 * DNA-119134 Crash at views::ViewAXPlatformNodeDelegate:: FireNativeEvent * DNA-122014 [VPN Pro] Add VPN Pro section to chrome://opera-diagnostics * DNA-122222 [Split screen] Active tab refreshes instead of current tab * DNA-122251 [Easy Files] Transparent glitch appears with some file types in popup * DNA-122347 Background music resumes after toggling mic/camera in Google Meet * DNA-122569 Gmail video popup disappears and Meet disconnects when switching tabs or clicking redirect button * DNA-122601 Report client version in vpnpro diagnostics * DNA-122695 VPN section not available in opera settings on first run * DNA-122764 [Split screen] Popup arrow is pinned to easy setup button instead of the password manager * DNA-122849 The popup windows for 'Accounts saved for this website' and the credentials view are too wide * DNA-122853 Support multiple static wallpapers in a single theme * DNA-122883 [SD] Tile names are not visible in folder when a custom wallpaper is used * DNA-122959 Refactor tab automuting * DNA-123026 Crash when clicking manage passwords button in address bar when "Sign in" credentials API popup is displayed * DNA-123031 [Opera Translate] Opera Translate popup does not open in split screen tabs * DNA-123038 Crash at -[OperaCrApplication validateMenuItem:] * DNA-123057 USB netinstaller is not starting * DNA-123086 Crash at BrowserLiveTabContext:: GetSplitScreenIdForTab * DNA-123089 [Opera Translate] "How does it work?" link leads to incorrect page * DNA-123100 Translate popup is shown each time page is being autotranslated - Update to 120.0.5543.38 * CHR-10028 Update Chromium on desktop-stable-135-5543 to 135.0.7049.115 * DNA-112048 Spelling error in speed dial German translation * DNA-118890 Crash at opera::RegisterPathProvider * DNA-119134 Crash at views::ViewAXPlatformNodeDelegate:: FireNativeEvent * DNA-119349 [Split screen] Restoring tabs opens split screen tabs as tab island * DNA-120162 Crash at opera::MainMenu::FillOMenuHeader * DNA-120341 Crash at opera::oauth2::DeviceNameServiceImpl:: HasDeviceNameChanged * DNA-120753 Crash at opera::BrowserWindowCocoa::GetBounds * DNA-120799 Hide toolbar entries based on the available width and a prioritized list * DNA-120928 A red dot indicating a new message appears, even though no message has been received * DNA-120940 [Split Screen toolbar] Snapshot is not displayed correctly with Speed Dial page * DNA-120997 [Split screen toolbar] 'Ask Aria' should not be visible * DNA-120998 [Split Screen toolbar] Extensions container is displayed for both panels * DNA-121093 Possibility to remove the only/last classic theme * DNA-121111 [Tab Island Split Screen] Add context menu option to move out of tab island for split screen in tab island * DNA-122499 [Password Management] Save-password popup displays dark mode image in light mode * DNA-122500 [Password Management] Save-password popup image lacks shadow * DNA-122501 [Password Management] Incorrect styling for Password Manager link * DNA-121260 Disable background music during Google Meet call * DNA-121446 Crash at bookmarks::BookmarkModel::~BookmarkModel * DNA-121495 Can not focus folder on start page by keybard navigation * DNA-121554 [Split screen toolbar] Icons remain visible with dropdown opened until hovered again * DNA-121555 [Split screen toolbar] "Add to Pinboard" feature remains in loading state and does not complete * DNA-121561 After reopening, easy setup doesn't start from the top * DNA-121564 Crash at views::View::SetPaintToLayer * DNA-121567 Sometimes autocomplete in dropdown eats some letters * DNA-121582 Crash at extensions::TabsQueryFunction::Run * DNA-121590 DevTools attempts to match Chrome's language setting * DNA-121591 DevTools displays Chrome's recording feature * DNA-121603 Disable some items in 'On Exit' tab when sync is enabled * DNA-121617 [Linux] No settings are displayed on the certificates page * DNA-121662 [Tab Island Split Screen] Closing split screen tab in collapsed tab island causes island to become invisible * DNA-121669 Search bar blends into background on opera://flags * DNA-121708 Support theme color abstraction and expose color values * DNA-121753 [Tab Island Split Screen] Add tab button is cut off after dragging split screen into tab island * DNA-121784 [Tab Island Split Screen] Dragging split screen on tab strip hides it under tab island * DNA-121786 SD tile colors are reversed in dark mode and light mode * DNA-121787 Allow H.264 levels up to 5.1/5.2 * DNA-121790 Crash at signin::IdentityManager:: GetPrimaryAccountInfo * DNA-121817 [Toolbar miniplayer] Gap between address bar and miniplayer is too small * DNA-121818 [Toolbar miniplayer] Hover effect on buttons should be the same as hover effect on address bar icons * DNA-121829 Wrap "On Exit" tab into feature flag #clear-history-on-exit * DNA-121864 Crash at extensions::ExtensionUpdater:: OnBlocklistDownloadFinished * DNA-121866 Translations for text in Easy Files context menu * DNA-121869 Incorrect download origin in opera://downloads page when "@" redirection is used * DNA-121870 Change logic to display last 5 used emojis * DNA-121872 Custom site panel field in sidebar setup truncates URLs longer than 64 characters * DNA-121875 Bump major version to 120 * DNA-121881 Crash at tabs::UnpinnedTabCollection:: AddTabRecursive * DNA-121886 Update env variables for web UI * DNA-121888 Opera React Web UI (operaaccount) tests fail * DNA-121894 Crash at extensions:: ProxySwitcherPrivateEventRouter::OnBrowserRemoved * DNA-121896 Linux ARM fails to compile * DNA-121897 CHECK when creating split screen without #split-screen-toolbar * DNA-121899 Translations for Opera 119 * DNA-121901 [Split screen] Only one tab is displayed after returning to split screen from different tab * DNA-121908 Installed extensions are located on the left side of the page. * DNA-121928 Remove chromium "Safety Check" option in settings * DNA-121937 Crash on saving split screen tabs to Pinboards * DNA-121945 [Clear browsing data on exit] [UI check] "i" icon color incorrectly displayed * DNA-121946 [Clear browsing data on exit] Incorrect display of 'i' icons for unlogged users * DNA-121947 [Tab Island Split Screen][UI check] Split screen blends with background in light theme * DNA-121951 [Split screen toolbar] [UI check] VPN badge displayed on both panels instead of just the right tab * DNA-121973 Crash at extensions::(anonymous namespace):: ThumbnailFetcher::Fetch when opening pinboard popup in private window * DNA-121975 [Private window] Text in address bar dropdown is almost invisible * DNA-121982 [Split screen] Split screen groups become tab islands after browser restart * DNA-121984 Not possible to change default cookie settings * DNA-121985 [Tab Island Split Screen] Split screen background remains on tab strip after collapsing tab island * DNA-121988 Saving page as PDF leads to page crash * DNA-121990 The selection moves/'jumps' in dropdown to where the cursor is, even if doesn't move the mouse * DNA-121993 Crash when restoring session containing opera://flags * DNA-121994 Crash at base::ObserverList::RemoveObserver * DNA-121995 Crash at opera::HeartButtonControllerImpl::Update * DNA-121998 [VPN Pro][Settings] Location list for Express subscription in settings shows numbers instead of flags and location names * DNA-121999 [VPN Pro][VPN badge] For Express VPN locations different numbers are displayed as IP address * DNA-122001 [VPN Pro] If there are multiple locations for a country, selecting one causes all of them to be shown as active * DNA-122007 [Split screen toolbar] Toolbar icons not displayed on hover * DNA-122012 Crash at opera::ComponentTabCyclerView:: HighlightContents * DNA-122017 Skip Ad button not shown in PiP window for YouTube ads * DNA-122023 [Split screen] Address bar in both panels duplicates on click * DNA-122034 Gray out 'Create' button when limit of custom sites is reached * DNA-122042 Fix recently used locations for ExpressVPN provider * DNA-122043 Converting different currencies into RUB, BYN, HRK, IDR doesn't work * DNA-122045 BrowserNavigatorTest.Disposition_NewPopup_ ExtensionId fails * DNA-122053 Text not visible when hovering over options in padlock popup * DNA-122056 Crash at opera::component_based::ComponentTabBar:: ReorderChildren * DNA-122068 Detached split screen is incorrectly drawn * DNA-122070 Split screen dragged out of an island is re-attached in a wrong position * DNA-122072 [Split screen toolbar] Clicking on translate button has no effect * DNA-122080 Crash when creating split screen from orphaned and pinned tab * DNA-122083 Workspaces cannot be edited when there's a maximum number of them. * DNA-122101 Crash on switching workspaces if Opera runs with disable-animations-for-tests * DNA-122107 [Split screen toolbar] Crash when cancelling drop action with Esc when target drop view is visible * DNA-122119 "Close tabs" tab menu option does not close both tabs in inactive split screen group * DNA-122120 Split screen group is destroyed after moving group and another tab to a new window * DNA-122122 [Clear browsing data on exit] History not deleted on exit with custom sync settings * DNA-122123 [Clear browsing data on exit] Options remain checked if previously selected after sync is enabled * DNA-122129 [Tab Island Split Screen][UI Check] No hover effect on split screen tabs * DNA-122130 Chromium warning dialog in settings * DNA-122133 [Pinboards] Wrong tab added to Pinboards when attempting to add tab from context menu * DNA-122135 Incorrect translation of "may" in German language * DNA-122137 Spelling error in speed dial German translation * DNA-122142 Add a comment line switch to simulate a browser update ready state * DNA-122144 Style components with environmental tokens * DNA-122146 [VPN Pro][Settings] If there are multiple locations for a country, selecting one causes all of them to be shown as active * DNA-122149 Free vpn location is broken * DNA-122154 Reconnect to vpn service after changing vpn pro subscriptions * DNA-122167 Crash at PrefService::GetBoolean * DNA-122171 'Show emojis in tab tooltip' setting visible after disabling feature flag * DNA-122177 [Split screen toolbar] Miniplayer is shown in both toolbars all the time * DNA-122178 Disable BrowserNavigatorTest.Disposition_ PictureInPicture_OpenFromWebApp * DNA-122179 BrowserNavigatorTest.ReloadLockedTab crashes (DCHECK) * DNA-122189 [Split screen] Web view does not show content from two tabs after restart * DNA-122190 [Miniplayer in toolbar] Mini-player in toolbar is only shown in split screen * DNA-122193 Crash at opera::component_based:: SplitScreenModelImpl::InsertSplitScreen * DNA-122201 [Meet][Player] After closing 'Present now' popup music from player starts playing * DNA-122203 Bookmark folders are no longer visible in "O" menu * DNA-122204 [Miniplayer in toolbar] Mini-player stays visible on toolbar after being unpinned * DNA-122217 Failure to connect with Flow push notifications not working * DNA-122218 [Split screen toolbar] Not all available icons are visible on hover until address bar is clicked * DNA-122224 Use chromium's ui::ColorTransform in color mixer * DNA-122230 Missing flag icon in settings * DNA-122240 [Split screen toolbar] Display VPN badge for both split screen sites * DNA-122255 Typo in Easy Setup for RU * DNA-122260 [VPN] The VPN icon disappears after focusing the address bar * DNA-122275 Add tooltip to "On exit" part in settings * DNA-122287 [Clear browsing data on exit] Missing translations for information tooltip * DNA-122290 Bookmarks are visible behind split screen * DNA-122360 VideoPictureInPictureWindowControllerBrowserTest. ControlsVisibility fails on Linux * DNA-122361 Shader has crashed * DNA-122363 Showing split screen as one tab in tab cycler no longer works after enabling #split-screen-in-tab-island * DNA-122365 Extra '&' symbol displaying in bookmarks subfolder names * DNA-122366 Fix tab island dragging scenarios after CHR-9995 * DNA-122367 Add Split Screen restrictions on auto-PiP * DNA-122372 Update dynamic themes list with viking * DNA-122377 Translations for on-exit tooltip * DNA-122395 [Clear browsing data on exit] Tooltip for "on exit" does not match design * DNA-122401 DumpWithoutCrashing at sql::(anonymous namespace):: RecordOpenDatabaseFailureReason(const class std::__Cr:: basic_string& const, sql::(anonymous namespace):: OpenDatabaseFailedReason) * DNA-122405 [Yubikey] The 2-Step Verification popup does not appear and the user is unable to sign in * DNA-122407 [Split screen] Drop area is not shown when moving mouse to other side of split screen view * DNA-122409 [Clear browsing data on exit] Update the style for dark theme tooltips * DNA-122410 Google information in delete browsing data section * DNA-122411 Backport fix for CVE-2025-4664 * DNA-122431 Manifest v2 extensions are disabled after Opera restart * DNA-122444 Add accessibility title for password manager popup * DNA-122503 [Opera One] Enable token support without the flag * DNA-122504 Paypal entry in siteprefs.json is causing users to not be able to sign in * DNA-122512 [Password Management] Password is shown as a clear text by system accessibility * DNA-122513 [Password Management] Font size in password-manager page is bigger than in settings * DNA-122520 [VPN Pro] Download subscription after enabling #vpn-pro-v4-support flag * DNA-122522 Enable #split-screen-toolbar on all streams * DNA-122532 Promoto 120 to beta * DNA-122540 Translations for Opera 120 * DNA-122555 [Password Management] Password update prompt is shown as sliding toolbar (old style) * DNA-122558 "+" button shifts position after cancelled split screen * DNA-122561 [Password Management] Manage Passwords icon is not shown in address bar when in split screen mode * DNA-122562 [Password Management] Save password popup is incorrectly anchored in split screen mode * DNA-122576 Live background loaded on GPU process crash even if not visible * DNA-122628 [O120] Crash at performance_manager::mechanism:: PageDiscarder::DiscardPageNodes * DNA-122635 Backport 0-day fix for CVE-2025-5419 and chromium issue 420637585 * DNA-122659 startpage opening animation is not disabled * DNA-122665 Tab island tooltip has incorrect design * DNA-122715 Crash at media::ATAudioFormatReader::ChooseFormat * DNA-122723 'Accounts saved for this website' popup has a chrome design * DNA-122724 web page credentials popup has a chrome design * DNA-122730 Password popup design do not match the mockup * DNA-122734 Replace background of 'banner' on the VPN badge popup UI * DNA-122749 Crash in AddressBarControllerImpl:: OnActiveTabChanged() on non-developer channels * DNA-122765 Can't close the popup by clicking the password manager icon in the address bar * DNA-122772 Crash at ManagePasswordsUIController:: GetManagePasswordsButtonView * DNA-122774 Tab Island tabs dropdown not visible when "Show tabs from the same domain in tab tooltip" is disabled * DNA-122778 Enable #password-management-popup on all streams * DNA-122780 [password-management-popup=off] Passwords badge not shown until user clicks in the address bar * DNA-122791 The button corners are not rounded enough * DNA-122795 Password popup header does not match the mockup * DNA-122826 Crash loop when trying to launch Opera with-feature:pinboard=off * DNA-122850 Missing tooltip over buttons on the 'web page credentials' popup * DNA-122851 Missing hover effect * DNA-122852 On the 'Accounts saved for this website' popup, the whole row should be clickable not only an arrow * DNA-122864 "Copy password" button should not be visible in save password popup * DNA-122984 Enable #translator on all streams for Opera One * DNA-123014 Promote 120 to stable - Complete Opera 120 changelog at: https://blogs.opera.com/desktop/changelog-for-120 - Update to 119.0.5497.131 * DNA-122535 Crash at opera::TabHoverCardTabArtContainerView:: OnTabArtButtonClicked * DNA-122854 Investigate backwards compatibility for multiple wallpaper themes * DNA-122012 Crash at opera::ComponentTabCyclerView:: HighlightContents - Update to 119.0.5497.110 * DNA-120753 Crash at opera::BrowserWindowCocoa::GetBounds * DNA-122607 Make labels in themes localizable * DNA-122715 Crash at media::ATAudioFormatReader::ChooseFormat * DNA-122734 Replace background of 'banner' on the VPN badge popup UI - Update to 119.0.5497.88 * DNA-122663 Close tab islands cannot be clicked if "Show tabs from the same domain in tooltip" is disabled - Changes in 119.0.5497.70 * DNA-120753 Crash at opera::BrowserWindowCocoa::GetBounds * DNA-122106 Add error code and message to setError crashlog * DNA-122203 Bookmark folders are no longer visible in "O" menu * DNA-122149 Free vpn location is broken * DNA-122230 Missing flag icon in settings - Update to 119.0.5497.56 * DNA-120753 Crash at opera::BrowserWindowCocoa::GetBounds * DNA-122361 Shader has crashed * DNA-122402 Enable #easy-setup-react on all streams * DNA-122409 [Clear browsing data on exit] Update the style for dark theme tooltips * DNA-122535 Crash at opera::TabHoverCardTabArtContainerView:: OnTabArtButtonClicked * DNA-122576 Live background loaded on GPU process crash even if not visible Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.6:NonFree: zypper in -t patch openSUSE-2025-265=1 Package List: - openSUSE Leap 15.6:NonFree (x86_64): opera-120.0.5543.61-lp156.2.38.1 References: https://www.suse.com/security/cve/CVE-2025-4664.html https://www.suse.com/security/cve/CVE-2025-5419.html