SUSE-SU-2016:3148-1
Security update for flash-player
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for flash-player fixes the following issues: - Security update to 24.0.0.186 (bsc#1015379) APSB16-39: * These updates resolve use-after-free vulnerabilities that could have lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892). * These updates resolve buffer overflow vulnerabilities that could have lead to code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870). * These updates resolve memory corruption vulnerabilities that could have lead to code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874, CVE-2016-7875, CVE-2016-7876). * These updates resolve a security bypass vulnerability (CVE-2016-7890). - Keep standalone flashplayer at version 11, no newer version exists (INSECURE!). - Update EULA to version 24.0.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | flash-player, flash-player-gnome | 24.0.0.186-152.1 |
Mostrar las 2 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | flash-player | 24.0.0.186-152.1 |
| SUSE Linux Enterprise 12.1 | flash-player-gnome | 24.0.0.186-152.1 |
Referencias
- https://bugzilla.suse.com/1015379
- https://lists.suse.com/pipermail/sle-security-updates/2016-December/002486.html
- https://www.suse.com/security/cve/CVE-2016-7867/
- https://www.suse.com/security/cve/CVE-2016-7868/
- https://www.suse.com/security/cve/CVE-2016-7869/
- https://www.suse.com/security/cve/CVE-2016-7870/
- https://www.suse.com/security/cve/CVE-2016-7871/
- https://www.suse.com/security/cve/CVE-2016-7872/
Las 21 referencias
- https://www.suse.com/security/cve/CVE-2016-7873/
- https://www.suse.com/security/cve/CVE-2016-7874/
- https://www.suse.com/security/cve/CVE-2016-7875/
- https://www.suse.com/security/cve/CVE-2016-7876/
- https://www.suse.com/security/cve/CVE-2016-7877/
- https://www.suse.com/security/cve/CVE-2016-7878/
- https://www.suse.com/security/cve/CVE-2016-7879/
- https://www.suse.com/security/cve/CVE-2016-7880/
- https://www.suse.com/security/cve/CVE-2016-7881/
- https://www.suse.com/security/cve/CVE-2016-7890/
- https://www.suse.com/security/cve/CVE-2016-7892/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2016/suse-su-20163148-1/