Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

openSUSE: 2015:0725-1 Important: Adobe Flash Player Code Execution

opensuse
Calendar Grey April 16, 2015
Scroller Opensuse
Major patch for Adobe Flash Player on openSUSE introduces 45 crucial corrections addressing significant security flaws and weaknesses.
An update that fixes 45 vulnerabilities is now available

Description

Adobe Flash Player was updated to 11.2.202.457 to fix several security

issues that could lead to remote code execution.

An exploit for CVE-2015-3043 was reported to exist in the wild.

The following vulnerabilities were fixed:

* Memory corruption vulnerabilities that could lead to code execution

(CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353,

CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038,

CVE-2015-3041, CVE-2015-3042, CVE-2015-3043).

* Type confusion vulnerability that could lead to code execution

(CVE-2015-0356).

* Buffer overflow vulnerability that could lead to code execution

(CVE-2015-0348).

* Use-after-free vulnerabilities that could lead to code execution

(CVE-2015-0349, CVE-2015-0351, CVE-2015-0358, CVE-2015-3039).

* Double-free vulnerabilities that could lead to code execution

(CVE-2015-0346, CVE-2015-0359).

* Memory leak vulnerabilities that could be used to bypass ASLR

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue code execution memory corruption important update openSUSE Adobe Flash Player

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE Evergreen 11.4:

zypper in -t patch 2015-13=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE Evergreen 11.4 (i586 x86_64):

flash-player-11.2.202.457-158.1

flash-player-gnome-11.2.202.457-158.1

flash-player-kde4-11.2.202.457-158.1

References

https://www.suse.com/security/cve/CVE-2014-0558.html

https://www.suse.com/security/cve/CVE-2014-0564.html

https://www.suse.com/security/cve/CVE-2014-0569.html

https://www.suse.com/security/cve/CVE-2014-0573.html

https://www.suse.com/security/cve/CVE-2014-0574.html

https://www.suse.com/security/cve/CVE-2014-0576.html

https://www.suse.com/security/cve/CVE-2014-0577.html

https://www.suse.com/security/cve/CVE-2014-0581.html

https://www.suse.com/security/cve/CVE-2014-0582.html

https://www.suse.com/security/cve/CVE-2014-0583.html

https://www.suse.com/security/cve/CVE-2014-0584.html

https://www.suse.com/security/cve/CVE-2014-0585.html

https://www.suse.com/security/cve/CVE-2014-0586.html

https://www.suse.com/security/cve/CVE-2014-0588.html

https://www.suse.com/security/cve/CVE-2014-0589.html

https://www.suse.com/security/cve/CVE-2014-0590.html

https://www.suse.com/security/cve/CVE-2014-8437.html

https://www.suse.com/security/cve/CVE-2014-8438.html

https://www.suse.com/security/cve/CVE-2014-8440.html

https://www....

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2015:0725-1
Rating: important
Affected Products: openSUSE Evergreen 11.4 .

Topics%20covered

Topics Covered

security advisory security issue code execution memory corruption important update openSUSE Adobe Flash Player

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.