SUSE-SU-2015:2402-1
Security update for flash-player
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650: Use-after-free vulnerabilities that could lead to code execution. - CVE-2015-8459, CVE-2015-8460, CVE-2015-8636, CVE-2015-8645: Memory corruption vulnerabilities that could lead to code execution.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 11.3 | flash-player, flash-player-gnome, flash-player-kde4 | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player, flash-player-gnome, flash-player-kde4 | 11.2.202.559-0.32.1 |
Alle 6 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| SUSE Linux Enterprise 11.3 | flash-player | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.3 | flash-player-gnome | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.3 | flash-player-kde4 | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player-gnome | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player-kde4 | 11.2.202.559-0.32.1 |
Referenzen
- https://bugzilla.suse.com/960317
- https://lists.suse.com/pipermail/sle-security-updates/2015-December/001773.html
- https://www.suse.com/security/cve/CVE-2015-8459/
- https://www.suse.com/security/cve/CVE-2015-8460/
- https://www.suse.com/security/cve/CVE-2015-8634/
- https://www.suse.com/security/cve/CVE-2015-8635/
- https://www.suse.com/security/cve/CVE-2015-8636/
- https://www.suse.com/security/cve/CVE-2015-8638/
Alle 23 Referenzen
- https://www.suse.com/security/cve/CVE-2015-8639/
- https://www.suse.com/security/cve/CVE-2015-8640/
- https://www.suse.com/security/cve/CVE-2015-8641/
- https://www.suse.com/security/cve/CVE-2015-8642/
- https://www.suse.com/security/cve/CVE-2015-8643/
- https://www.suse.com/security/cve/CVE-2015-8644/
- https://www.suse.com/security/cve/CVE-2015-8645/
- https://www.suse.com/security/cve/CVE-2015-8646/
- https://www.suse.com/security/cve/CVE-2015-8647/
- https://www.suse.com/security/cve/CVE-2015-8648/
- https://www.suse.com/security/cve/CVE-2015-8649/
- https://www.suse.com/security/cve/CVE-2015-8650/
- https://www.suse.com/security/cve/CVE-2015-8651/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2015/suse-su-20152402-1/