Lucene search

K
suseSuseSUSE-SU-2015:0239-1
HistoryFeb 07, 2015 - 7:07 p.m.

Security update for flash-player, flash-player-gnome, flash-player-kde4 (critical)

2015-02-0719:07:55
lists.opensuse.org
13

0.975 High

EPSS

Percentile

100.0%

flash-player was updated to version 11.2.202.442 to fix 18 security issues.

These security issues were fixed: - Use-after-free vulnerabilities that
could lead to code execution (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320,
CVE-2015-0322). - Memory corruption vulnerabilities that could lead to
code execution (CVE-2015-0314, CVE-2015-0316, CVE-2015-0318,
CVE-2015-0321, CVE-2015-0329, CVE-2015-0330). - Type confusion
vulnerabilities that could lead to code execution (CVE-2015-0317,
CVE-2015-0319). - Heap buffer
overflow vulnerabilities that could lead to code execution (CVE-2015-0323,
CVE-2015-0327). - Buffer overflow vulnerability that could lead to code
execution (CVE-2015-0324). - Null pointer dereference issues
(CVE-2015-0325, CVE-2015-0326, CVE-2015-0328).

More information is available at
<a href=β€œhttps://helpx.adobe.com/security/products/flash-player/apsb15-04.html”>https://helpx.adobe.com/security/products/flash-player/apsb15-04.html</a>

Security Issues:

   * CVE-2015-0313
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0313">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0313</a>&gt;
   * CVE-2015-0314
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0314">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0314</a>&gt;
   * CVE-2015-0315
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0315">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0315</a>&gt;
   * CVE-2015-0316
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0316">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0316</a>&gt;
   * CVE-2015-0317
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0317">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0317</a>&gt;
   * CVE-2015-0318
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0318">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0318</a>&gt;
   * CVE-2015-0319
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0319">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0319</a>&gt;
   * CVE-2015-0320
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0320">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0320</a>&gt;
   * CVE-2015-0321
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0321">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0321</a>&gt;
   * CVE-2015-0322
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0322">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0322</a>&gt;
   * CVE-2015-0323
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0323">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0323</a>&gt;
   * CVE-2015-0324
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0324">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0324</a>&gt;
   * CVE-2015-0325
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0325">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0325</a>&gt;
   * CVE-2015-0326
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0326">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0326</a>&gt;
   * CVE-2015-0327
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0327">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0327</a>&gt;
   * CVE-2015-0328
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0328">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0328</a>&gt;
   * CVE-2015-0329
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0329">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0329</a>&gt;
   * CVE-2015-0330
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0330">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0330</a>&gt;

Contraindications: