- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 201601-03
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                           https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal
    Title: Adobe Flash Player: Multiple vulnerabilities
     Date: January 26, 2016
     Bugs: #567838, #570040
       ID: 201601-03

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
=======
Multiple vulnerabilities have been found in Adobe Flash Player, the
worst of which allows remote attackers to execute arbitrary code.

Background
=========
The Adobe Flash Player is a renderer for the SWF file format, which is
commonly used to provide interactive websites.

Affected packages
================
    -------------------------------------------------------------------
     Package              /     Vulnerable     /            Unaffected
    -------------------------------------------------------------------
  1  www-plugins/adobe-flash   < 11.2.202.559         >= 11.2.202.559

Description
==========
Multiple vulnerabilities have been discovered in Adobe Flash Player.
Please review the CVE identifiers referenced below for details.

Impact
=====
A remote attacker could possibly execute arbitrary code with the
privileges of the process, cause a Denial of Service condition, obtain
sensitive information, or bypass security restrictions.

Workaround
=========
There is no known workaround at this time.

Resolution
=========
All Adobe Flash Player users should upgrade to the latest version:

  # emerge --sync
  # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.559"

References
=========
[  1 ] CVE-2015-8045
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8045
[  2 ] CVE-2015-8047
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8047
[  3 ] CVE-2015-8048
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8048
[  4 ] CVE-2015-8049
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8049
[  5 ] CVE-2015-8050
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8050
[  6 ] CVE-2015-8055
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8055
[  7 ] CVE-2015-8056
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8056
[  8 ] CVE-2015-8057
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8057
[  9 ] CVE-2015-8058
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8058
[ 10 ] CVE-2015-8059
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8059
[ 11 ] CVE-2015-8060
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8060
[ 12 ] CVE-2015-8061
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8061
[ 13 ] CVE-2015-8062
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8062
[ 14 ] CVE-2015-8063
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8063
[ 15 ] CVE-2015-8064
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8064
[ 16 ] CVE-2015-8065
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8065
[ 17 ] CVE-2015-8066
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8066
[ 18 ] CVE-2015-8067
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8067
[ 19 ] CVE-2015-8068
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8068
[ 20 ] CVE-2015-8069
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8069
[ 21 ] CVE-2015-8070
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8070
[ 22 ] CVE-2015-8071
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8071
[ 23 ] CVE-2015-8401
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8401
[ 24 ] CVE-2015-8402
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8402
[ 25 ] CVE-2015-8403
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8403
[ 26 ] CVE-2015-8404
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8404
[ 27 ] CVE-2015-8405
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8405
[ 28 ] CVE-2015-8406
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8406
[ 29 ] CVE-2015-8407
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8407
[ 30 ] CVE-2015-8408
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8408
[ 31 ] CVE-2015-8409
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8409
[ 32 ] CVE-2015-8410
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8410
[ 33 ] CVE-2015-8411
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8411
[ 34 ] CVE-2015-8412
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8412
[ 35 ] CVE-2015-8413
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8413
[ 36 ] CVE-2015-8414
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8414
[ 37 ] CVE-2015-8415
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8415
[ 38 ] CVE-2015-8416
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8416
[ 39 ] CVE-2015-8417
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8417
[ 40 ] CVE-2015-8418
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8418
[ 41 ] CVE-2015-8419
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8419
[ 42 ] CVE-2015-8420
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8420
[ 43 ] CVE-2015-8421
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8421
[ 44 ] CVE-2015-8422
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8422
[ 45 ] CVE-2015-8423
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8423
[ 46 ] CVE-2015-8424
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8424
[ 47 ] CVE-2015-8425
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8425
[ 48 ] CVE-2015-8426
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8426
[ 49 ] CVE-2015-8427
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8427
[ 50 ] CVE-2015-8428
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8428
[ 51 ] CVE-2015-8429
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8429
[ 52 ] CVE-2015-8430
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8430
[ 53 ] CVE-2015-8431
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8431
[ 54 ] CVE-2015-8432
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8432
[ 55 ] CVE-2015-8433
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8433
[ 56 ] CVE-2015-8434
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8434
[ 57 ] CVE-2015-8435
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8435
[ 58 ] CVE-2015-8436
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8436
[ 59 ] CVE-2015-8437
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8437
[ 60 ] CVE-2015-8438
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8438
[ 61 ] CVE-2015-8439
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8439
[ 62 ] CVE-2015-8440
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8440
[ 63 ] CVE-2015-8441
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8441
[ 64 ] CVE-2015-8442
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8442
[ 65 ] CVE-2015-8443
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8443
[ 66 ] CVE-2015-8443
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8443
[ 67 ] CVE-2015-8445
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8445
[ 68 ] CVE-2015-8446
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8446
[ 69 ] CVE-2015-8447
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8447
[ 70 ] CVE-2015-8448
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8448
[ 71 ] CVE-2015-8449
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8449
[ 72 ] CVE-2015-8450
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8450
[ 73 ] CVE-2015-8451
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8451
[ 74 ] CVE-2015-8452
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8452
[ 75 ] CVE-2015-8453
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8453
[ 76 ] CVE-2015-8454
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8454
[ 77 ] CVE-2015-8455
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8455
[ 78 ] CVE-2015-8459
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8459
[ 79 ] CVE-2015-8460
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8460
[ 80 ] CVE-2015-8635
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8635
[ 81 ] CVE-2015-8636
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8636
[ 82 ] CVE-2015-8638
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8638
[ 83 ] CVE-2015-8639
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8639
[ 84 ] CVE-2015-8640
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8640
[ 85 ] CVE-2015-8641
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8641
[ 86 ] CVE-2015-8642
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8642
[ 87 ] CVE-2015-8643
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8643
[ 88 ] CVE-2015-8644
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8644
[ 89 ] CVE-2015-8645
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8645
[ 90 ] CVE-2015-8646
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8646
[ 91 ] CVE-2015-8647
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8647
[ 92 ] CVE-2015-8648
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8648
[ 93 ] CVE-2015-8649
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8649
[ 94 ] CVE-2015-8650
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8650
[ 95 ] CVE-2015-8651
       http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8651

Availability
===========
This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

 https://security.gentoo.org/glsa/201601-03

Concerns?
========
Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
security@gentoo.org or alternatively, you may file a bug at
https://bugs.gentoo.org.

License
======
Copyright 2016 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5/

Gentoo: GLSA-201601-03: Adobe Flash Player: Multiple vulnerabilities

Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

Summary

Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details.

Resolution

All Adobe Flash Player users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.559"

References

[ 1 ] CVE-2015-8045 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8045 [ 2 ] CVE-2015-8047 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8047 [ 3 ] CVE-2015-8048 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8048 [ 4 ] CVE-2015-8049 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8049 [ 5 ] CVE-2015-8050 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8050 [ 6 ] CVE-2015-8055 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8055 [ 7 ] CVE-2015-8056 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8056 [ 8 ] CVE-2015-8057 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8057 [ 9 ] CVE-2015-8058 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8058 [ 10 ] CVE-2015-8059 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8059 [ 11 ] CVE-2015-8060 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8060 [ 12 ] CVE-2015-8061 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8061 [ 13 ] CVE-2015-8062 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8062 [ 14 ] CVE-2015-8063 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8063 [ 15 ] CVE-2015-8064 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8064 [ 16 ] CVE-2015-8065 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8065 [ 17 ] CVE-2015-8066 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8066 [ 18 ] CVE-2015-8067 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8067 [ 19 ] CVE-2015-8068 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8068 [ 20 ] CVE-2015-8069 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8069 [ 21 ] CVE-2015-8070 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8070 [ 22 ] CVE-2015-8071 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8071 [ 23 ] CVE-2015-8401 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8401 [ 24 ] CVE-2015-8402 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8402 [ 25 ] CVE-2015-8403 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8403 [ 26 ] CVE-2015-8404 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8404 [ 27 ] CVE-2015-8405 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8405 [ 28 ] CVE-2015-8406 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8406 [ 29 ] CVE-2015-8407 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8407 [ 30 ] CVE-2015-8408 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8408 [ 31 ] CVE-2015-8409 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8409 [ 32 ] CVE-2015-8410 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8410 [ 33 ] CVE-2015-8411 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8411 [ 34 ] CVE-2015-8412 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8412 [ 35 ] CVE-2015-8413 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8413 [ 36 ] CVE-2015-8414 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8414 [ 37 ] CVE-2015-8415 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8415 [ 38 ] CVE-2015-8416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8416 [ 39 ] CVE-2015-8417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8417 [ 40 ] CVE-2015-8418 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8418 [ 41 ] CVE-2015-8419 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8419 [ 42 ] CVE-2015-8420 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8420 [ 43 ] CVE-2015-8421 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8421 [ 44 ] CVE-2015-8422 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8422 [ 45 ] CVE-2015-8423 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8423 [ 46 ] CVE-2015-8424 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8424 [ 47 ] CVE-2015-8425 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8425 [ 48 ] CVE-2015-8426 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8426 [ 49 ] CVE-2015-8427 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8427 [ 50 ] CVE-2015-8428 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8428 [ 51 ] CVE-2015-8429 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8429 [ 52 ] CVE-2015-8430 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8430 [ 53 ] CVE-2015-8431 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8431 [ 54 ] CVE-2015-8432 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8432 [ 55 ] CVE-2015-8433 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8433 [ 56 ] CVE-2015-8434 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8434 [ 57 ] CVE-2015-8435 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8435 [ 58 ] CVE-2015-8436 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8436 [ 59 ] CVE-2015-8437 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8437 [ 60 ] CVE-2015-8438 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8438 [ 61 ] CVE-2015-8439 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8439 [ 62 ] CVE-2015-8440 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8440 [ 63 ] CVE-2015-8441 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8441 [ 64 ] CVE-2015-8442 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8442 [ 65 ] CVE-2015-8443 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8443 [ 66 ] CVE-2015-8443 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8443 [ 67 ] CVE-2015-8445 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8445 [ 68 ] CVE-2015-8446 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8446 [ 69 ] CVE-2015-8447 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8447 [ 70 ] CVE-2015-8448 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8448 [ 71 ] CVE-2015-8449 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8449 [ 72 ] CVE-2015-8450 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8450 [ 73 ] CVE-2015-8451 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8451 [ 74 ] CVE-2015-8452 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8452 [ 75 ] CVE-2015-8453 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8453 [ 76 ] CVE-2015-8454 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8454 [ 77 ] CVE-2015-8455 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8455 [ 78 ] CVE-2015-8459 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8459 [ 79 ] CVE-2015-8460 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8460 [ 80 ] CVE-2015-8635 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8635 [ 81 ] CVE-2015-8636 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8636 [ 82 ] CVE-2015-8638 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8638 [ 83 ] CVE-2015-8639 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8639 [ 84 ] CVE-2015-8640 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8640 [ 85 ] CVE-2015-8641 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8641 [ 86 ] CVE-2015-8642 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8642 [ 87 ] CVE-2015-8643 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8643 [ 88 ] CVE-2015-8644 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8644 [ 89 ] CVE-2015-8645 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8645 [ 90 ] CVE-2015-8646 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8646 [ 91 ] CVE-2015-8647 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8647 [ 92 ] CVE-2015-8648 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8648 [ 93 ] CVE-2015-8649 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8649 [ 94 ] CVE-2015-8650 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8650 [ 95 ] CVE-2015-8651 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8651

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201601-03

Concerns

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.

Severity

Severity: Normal

Title: Adobe Flash Player: Multiple vulnerabilities

Date: January 26, 2016

Bugs: #567838, #570040

ID: 201601-03

Synopsis

Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

Background

The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites.

Affected Packages

------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-plugins/adobe-flash < 11.2.202.559 >= 11.2.202.559

Impact

===== A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, obtain sensitive information, or bypass security restrictions.