SUSE-SU-2016:3148-1
Security update for flash-player
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for flash-player fixes the following issues: - Security update to 24.0.0.186 (bsc#1015379) APSB16-39: * These updates resolve use-after-free vulnerabilities that could have lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892). * These updates resolve buffer overflow vulnerabilities that could have lead to code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870). * These updates resolve memory corruption vulnerabilities that could have lead to code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874, CVE-2016-7875, CVE-2016-7876). * These updates resolve a security bypass vulnerability (CVE-2016-7890). - Keep standalone flashplayer at version 11, no newer version exists (INSECURE!). - Update EULA to version 24.0.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | flash-player, flash-player-gnome | 24.0.0.186-152.1 |
Afficher les 2 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 12.1 | flash-player | 24.0.0.186-152.1 |
| SUSE Linux Enterprise 12.1 | flash-player-gnome | 24.0.0.186-152.1 |
Références
- https://bugzilla.suse.com/1015379
- https://lists.suse.com/pipermail/sle-security-updates/2016-December/002486.html
- https://www.suse.com/security/cve/CVE-2016-7867/
- https://www.suse.com/security/cve/CVE-2016-7868/
- https://www.suse.com/security/cve/CVE-2016-7869/
- https://www.suse.com/security/cve/CVE-2016-7870/
- https://www.suse.com/security/cve/CVE-2016-7871/
- https://www.suse.com/security/cve/CVE-2016-7872/
Les 21 références
- https://www.suse.com/security/cve/CVE-2016-7873/
- https://www.suse.com/security/cve/CVE-2016-7874/
- https://www.suse.com/security/cve/CVE-2016-7875/
- https://www.suse.com/security/cve/CVE-2016-7876/
- https://www.suse.com/security/cve/CVE-2016-7877/
- https://www.suse.com/security/cve/CVE-2016-7878/
- https://www.suse.com/security/cve/CVE-2016-7879/
- https://www.suse.com/security/cve/CVE-2016-7880/
- https://www.suse.com/security/cve/CVE-2016-7881/
- https://www.suse.com/security/cve/CVE-2016-7890/
- https://www.suse.com/security/cve/CVE-2016-7892/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2016/suse-su-20163148-1/