critical Security update for flash-player

SUSE-SLE-WE-12-SP1-2016-1816

This update for flash-player fixes the following issues: - Security update to 24.0.0.186 (bsc#1015379) APSB16-39: * These updates resolve use-after-free vulnerabilities that could have lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881, CVE-2016-7892). * These updates resolve buffer overflow vulnerabilities that could have lead to code execution (CVE-2016-7867, CVE-2016-7868, CVE-2016-7869, CVE-2016-7870). * These updates resolve memory corruption vulnerabilities that could have lead to code execution (CVE-2016-7871, CVE-2016-7873, CVE-2016-7874, CVE-2016-7875, CVE-2016-7876). * These updates resolve a security bypass vulnerability (CVE-2016-7890). - Keep standalone flashplayer at version 11, no newer version exists (INSECURE!). - Update EULA to version 24.0.

• Release Date
  Dec 14 2016
• References
  Bugzilla: 1015379
  CVEs: CVE-2016-7879, CVE-2016-7892, CVE-2016-7868, CVE-2016-7890, CVE-2016-7880, CVE-2016-7881, CVE-2016-7878, CVE-2016-7871, CVE-2016-7870, CVE-2016-7873, CVE-2016-7872, CVE-2016-7875, CVE-2016-7867, CVE-2016-7877, CVE-2016-7876, CVE-2016-7869, CVE-2016-7874
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Enterprise Workstation Extension 12.1 x86_64

• Packages
  flash-player
  Adobe Flash Plugin

  24.0.0.186-152.1 lock rpm lock nosrc

  flash-player-gnome
  Adobe Flash Player Settings

  24.0.0.186-152.1 lock rpm