ArchLinux: 201604-7: flashplugin: multiple issues
Summary
- CVE-2016-1006 (JIT spraying mitigation bypass)
These updates harden a mitigation against JIT spraying attacks that
could be used to bypass memory layout randomization mitigations.
- CVE-2016-1015 CVE-2016-1019 (arbitrary code execution)
These updates resolve type confusion vulnerabilities that could lead to
code execution.
- CVE-2016-1011 CVE-2016-1013 CVE-2016-1016 CVE-2016-1017 CVE-2016-1031
(arbitrary code execution)
These updates resolve use-after-free vulnerabilities that could lead to
code execution.
- CVE-2016-1012 CVE-2016-1020 CVE-2016-1021 CVE-2016-1022 CVE-2016-1023
CVE-2016-1024 CVE-2016-1025 CVE-2016-1026 CVE-2016-1027 CVE-2016-1028
CVE-2016-1029 CVE-2016-1032 CVE-2016-1033 (arbitrary code execution)
These updates resolve memory corruption vulnerabilities that could lead
to code execution.
- CVE-2016-1018 (arbitrary code execution)
These updates resolve a stack overflow vulnerability that could lead to
code execution.
- CVE-2016-1030 (sandbox restriction bypass)
These updates resolve a security bypass vulnerability.
- CVE-2016-1014 (arbitrary code execution)
These updates resolve a vulnerability in the directory search path used
to find resources that could lead to code execution.
Resolution
Upgrade to 11.2.202.616-1.
# pacman -Syu "flashplugin>=11.2.202.616-1"
The problems have been fixed upstream in version 11.2.202.616.
References
https://helpx.adobe.com/security/products/flash-player/apsa16-01.html https://helpx.adobe.com/support/programs/support-options-free-discontinued-apps-services.html https://access.redhat.com/security/cve/CVE-2016-1006 https://access.redhat.com/security/cve/CVE-2016-1011 https://access.redhat.com/security/cve/CVE-2016-1012 https://access.redhat.com/security/cve/CVE-2016-1013 https://access.redhat.com/security/cve/CVE-2016-1014 https://access.redhat.com/security/cve/CVE-2016-1015 https://access.redhat.com/security/cve/CVE-2016-1016 https://access.redhat.com/security/cve/CVE-2016-1017 https://access.redhat.com/security/cve/CVE-2016-1018 https://access.redhat.com/security/cve/CVE-2016-1019 https://access.redhat.com/security/cve/CVE-2016-1020 https://access.redhat.com/security/cve/CVE-2016-1021 https://access.redhat.com/security/cve/CVE-2016-1022 https://access.redhat.com/security/cve/CVE-2016-1023 https://access.redhat.com/security/cve/CVE-2016-1024 https://access.redhat.com/security/cve/CVE-2016-1025 https://access.redhat.com/security/cve/CVE-2016-1026 https://access.redhat.com/security/cve/CVE-2016-1027 https://access.redhat.com/security/cve/CVE-2016-1028 https://access.redhat.com/security/cve/CVE-2016-1029 https://access.redhat.com/security/cve/CVE-2016-1030 https://access.redhat.com/security/cve/CVE-2016-1031 https://access.redhat.com/security/cve/CVE-2016-1032 https://access.redhat.com/security/cve/CVE-2016-1033
Workaround
None.