Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

openSUSE 11.4: SU-2012:0331-1 Important Flash-Player Threats

opensuse
Calendar Grey March 7, 2012
Dist Opensuse Esm H88
The latest update for openSUSE addresses two critical vulnerabilities in flash-player, aimed at thwarting potential code execution risks and safeguarding sensitive data from leaks.
An update that fixes two vulnerabilities is now available

Description

flash-player 11.1.102.63 fixes two security issues:

- memory corruption vulnerability in Matrix3D could lead to

code executionn (CVE-2012-0768)

- integer errors that could lead to information disclosure

(CVE-2012-0769)

Topics%20covered

Topics Covered

security advisory code execution memory corruption important information disclosure openSUSE flash player

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch flash-player-5927

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64) [New Version: 11.1.102.63]:

flash-player-11.1.102.63-0.2.1

References

https://www.suse.com/security/cve/CVE-2012-0768.html

https://www.suse.com/security/cve/CVE-2012-0769.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:0331-1
Rating: important
Affected Products: openSUSE 11.4 . It includes one version update.

Topics%20covered

Topics Covered

security advisory code execution memory corruption important information disclosure openSUSE flash player

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.