SUSE-SU-2015:2402-1
Security update for flash-player
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2015-8638, CVE-2015-8639, CVE-2015-8640, CVE-2015-8641, CVE-2015-8642, CVE-2015-8643, CVE-2015-8646, CVE-2015-8647, CVE-2015-8648, CVE-2015-8649, CVE-2015-8650: Use-after-free vulnerabilities that could lead to code execution. - CVE-2015-8459, CVE-2015-8460, CVE-2015-8636, CVE-2015-8645: Memory corruption vulnerabilities that could lead to code execution.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 11.3 | flash-player, flash-player-gnome, flash-player-kde4 | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player, flash-player-gnome, flash-player-kde4 | 11.2.202.559-0.32.1 |
Show all 6 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 11.3 | flash-player | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.3 | flash-player-gnome | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.3 | flash-player-kde4 | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player-gnome | 11.2.202.559-0.32.1 |
| SUSE Linux Enterprise 11.4 | flash-player-kde4 | 11.2.202.559-0.32.1 |
References
- https://bugzilla.suse.com/960317
- https://lists.suse.com/pipermail/sle-security-updates/2015-December/001773.html
- https://www.suse.com/security/cve/CVE-2015-8459/
- https://www.suse.com/security/cve/CVE-2015-8460/
- https://www.suse.com/security/cve/CVE-2015-8634/
- https://www.suse.com/security/cve/CVE-2015-8635/
- https://www.suse.com/security/cve/CVE-2015-8636/
- https://www.suse.com/security/cve/CVE-2015-8638/
All 23 references
- https://www.suse.com/security/cve/CVE-2015-8639/
- https://www.suse.com/security/cve/CVE-2015-8640/
- https://www.suse.com/security/cve/CVE-2015-8641/
- https://www.suse.com/security/cve/CVE-2015-8642/
- https://www.suse.com/security/cve/CVE-2015-8643/
- https://www.suse.com/security/cve/CVE-2015-8644/
- https://www.suse.com/security/cve/CVE-2015-8645/
- https://www.suse.com/security/cve/CVE-2015-8646/
- https://www.suse.com/security/cve/CVE-2015-8647/
- https://www.suse.com/security/cve/CVE-2015-8648/
- https://www.suse.com/security/cve/CVE-2015-8649/
- https://www.suse.com/security/cve/CVE-2015-8650/
- https://www.suse.com/security/cve/CVE-2015-8651/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2015/suse-su-20152402-1/