Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

Red Hat 4: RHSA-2011-0368-01 Critical: Flash Player Remote Code Execution

red hat
Calendar Grey March 21, 2011
Dist Redhat Esm H88
Urgent patch disables Java Runtime 8 on Fedora to address high-level threats. Ensure safety by applying these upgrades.
This update disables Adobe Flash Player 9 on Red Hat Enterprise Linux 4, as it contains multiple security flaws and should no longer be used

Solution

This update disables the flash-plugin package due to its known security vulnerabilities.

Summary

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.
Adobe Flash Player 9 is vulnerable to critical security flaws and should no longer be used. A remote attacker could use these flaws to execute arbitrary code with the privileges of the user running Flash Player 9. (CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0575, CVE-2011-0577, CVE-2011-0578, CVE-2011-0607, CVE-2011-0608)
Adobe is no longer providing security updates for Adobe Flash Player 9, and is not providing a replacement Flash Player version compatible with Red Hat Enterprise Linux 4.
This erratum disables Adobe Flash Player 9 to prevent it from functioning. User wishing to continue using Flash Player 9, despite the vulnerabilities, can add the flash-plugin package to the up2date skip list. Refer to the following Red Hat Knowledgebase article for instructions on adding a package to the up2date skip list: https://access.redhat.com/kb/docs/DOC-1639

Topics%20covered

Topics Covered

security advisory critical remote code execution Red Hat Enterprise security impact security flaws flash-plugin

References

https://access.redhat.com/security/cve/CVE-2011-0558 https://access.redhat.com/security/cve/CVE-2011-0559 https://access.redhat.com/security/cve/CVE-2011-0560 https://access.redhat.com/security/cve/CVE-2011-0561 https://access.redhat.com/security/cve/CVE-2011-0571 https://access.redhat.com/security/cve/CVE-2011-0572 https://access.redhat.com/security/cve/CVE-2011-0573 https://access.redhat.com/security/cve/CVE-2011-0574 https://access.redhat.com/security/cve/CVE-2011-0575 https://access.redhat.com/security/cve/CVE-2011-0577 https://access.redhat.com/security/cve/CVE-2011-0578 https://access.redhat.com/security/cve/CVE-2011-0607 https://access.redhat.com/security/cve/CVE-2011-0608 https://access.redhat.com/security/updates/classification/#critical http://kb2.adobe.com/cps/406/kb406791.html https://access.redhat.com/kb/docs/DOC-1639

Package List

Red Hat Enterprise Linux AS version 4 Extras:
i386: flash-plugin-9.0.289.0-3.el4.i386.rpm
Red Hat Desktop version 4 Extras:
i386: flash-plugin-9.0.289.0-3.el4.i386.rpm
Red Hat Enterprise Linux ES version 4 Extras:
i386: flash-plugin-9.0.289.0-3.el4.i386.rpm
Red Hat Enterprise Linux WS version 4 Extras:
i386: flash-plugin-9.0.289.0-3.el4.i386.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2011:0368-01
Product: Red Hat Enterprise Linux Extras
Advisory URL: https://access.redhat.com/errata/RHSA-2011:0368.html
Issue date: 2011-03-21

Topic

This update disables Adobe Flash Player 9 on Red Hat Enterprise Linux 4, asit contains multiple security flaws and should no longer be used.The Red Hat Security Response Team has rated this update as having criticalsecurity impact.

Topics%20covered

Topics Covered

security advisory critical remote code execution Red Hat Enterprise security impact security flaws flash-plugin

Relevant Releases Architectures

Red Hat Desktop version 4 Extras - i386

Red Hat Enterprise Linux AS version 4 Extras - i386

Red Hat Enterprise Linux ES version 4 Extras - i386

Red Hat Enterprise Linux WS version 4 Extras - i386

Bugs Fixed

676226 - CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0607 CVE-2011-0608 flash-plugin: multiple code execution flaws (APSB11-02)

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here