SUSE Security Update: Security update for flash-player
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0437-1
Rating:             critical
References:         #754689 
Cross-References:   CVE-2012-0773
Affected Products:
                    SUSE Linux Enterprise Desktop 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP1
                    SUSE Linux Enterprise Desktop 10 SP4
______________________________________________________________________________

   An update that fixes one vulnerability is now available. It
   includes two new package versions.

Description:


   Adobe Flash Player 11.1.102.63 fixes a memory corruption
   vulnerability in  the NetStream class that could have lead
   to code execution (CVE-2012-0773).

   Security Issue reference:

   * CVE-2012-0773
   


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp1-flash-player-6059

   - SUSE Linux Enterprise Desktop 11 SP1:

      zypper in -t patch sledsp1-flash-player-6059

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.228]:

      flash-player-11.2.202.228-0.3.1

   - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 11.2.202.228]:

      flash-player-11.2.202.228-0.3.1

   - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 10.3.183.18]:

      flash-player-10.3.183.18-0.5.2


References:

   https://www.suse.com/security/cve/CVE-2012-0773.html
   https://bugzilla.novell.com/754689
   https://login.microfocus.com/nidp/app/login
   https://login.microfocus.com/nidp/app/login