[security-announce] SUSE-SU-2013:0296-1: critical: Security update for flash-player

[news 28]

SUSE Security Update: Security update for flash-player

______________________________________________________________________________

 

Announcement ID: SUSE-SU-2013:0296-1

Rating: critical

References: #803485

Cross-References: CVE-2013-0637 CVE-2013-0638 CVE-2013-0639

CVE-2013-0642 CVE-2013-0644 CVE-2013-0645

CVE-2013-0647 CVE-2013-0649 CVE-2013-1365

CVE-2013-1366 CVE-2013-1367 CVE-2013-1368

CVE-2013-1369 CVE-2013-1370 CVE-2013-1372

CVE-2013-1373 CVE-2013-1374

Affected Products:

SUSE Linux Enterprise Desktop 11 SP2

SUSE Linux Enterprise Desktop 10 SP4

______________________________________________________________________________

 

An update that fixes 17 vulnerabilities is now available.

It includes one version update.

 

Description:

 

 

This update for flash-player to version 11.2.202.270,

tracked as ABSP13-05

, contains fixes for the following security issues:

 

* Several buffer overflow vulnerabilities that could

lead to code execution. (CVE-2013-0642

, CVE-2013-0645

, CVE-2013-1365

, CVE-2013-1366

, CVE-2013-1367

, CVE-2013-1368

, CVE-2013-1369

, CVE-2013-1370

, CVE-2013-1372

, CVE-2013-1373

)

* Use-after-free vulnerabilities that could lead to

code execution. ( CVE-2013-0644

, CVE-2013-0649

, CVE-2013-1374

)

* An integer overflow vulnerability that could lead to

code execution. ( CVE-2013-0639

)

* Two memory corruption vulnerabilities that could lead

to code execution. (CVE-2013-0638

, CVE-2013-0647

)

* An information disclosure vulnerability.

(CVE-2013-0637

)

 

 

Patch Instructions:

 

To install this SUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

 

- SUSE Linux Enterprise Desktop 11 SP2:

 

zypper in -t patch sledsp2-flash-player-7338

 

To bring your system up-to-date, use "zypper patch".

 

 

Package List:

 

- SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.270]:

 

flash-player-11.2.202.270-0.3.1

flash-player-gnome-11.2.202.270-0.3.1

flash-player-kde4-11.2.202.270-0.3.1

 

- SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 11.2.202.270]:

 

flash-player-11.2.202.270-0.5.1

 

 

References:

 

http://support.novell.com/security/cve/CVE-2013-0637.html

http://support.novell.com/security/cve/CVE-2013-0638.html

http://support.novell.com/security/cve/CVE-2013-0639.html

http://support.novell.com/security/cve/CVE-2013-0642.html

http://support.novell.com/security/cve/CVE-2013-0644.html

http://support.novell.com/security/cve/CVE-2013-0645.html

http://support.novell.com/security/cve/CVE-2013-0647.html

http://support.novell.com/security/cve/CVE-2013-0649.html

http://support.novell.com/security/cve/CVE-2013-1365.html

http://support.novell.com/security/cve/CVE-2013-1366.html

http://support.novell.com/security/cve/CVE-2013-1367.html

http://support.novell.com/security/cve/CVE-2013-1368.html

http://support.novell.com/security/cve/CVE-2013-1369.html

http://support.novell.com/security/cve/CVE-2013-1370.html

http://support.novell.com/security/cve/CVE-2013-1372.html

http://support.novell.com/security/cve/CVE-2013-1373.html

http://support.novell.com/security/cve/CVE-2013-1374.html

https://bugzilla.novell.com/803485

http://download.novell.com/patch/finder/?keywords=3c1e2d8109d0393f30c137f2f4d16628

http://download.novell.com/patch/finder/?keywords=bd904e708bb0e01638db2f0e3e06bc29

 

--

To unsubscribe, e-mail: opensuse-security-announce+unsubscribe ( -at -) opensuse.org

For additional commands, e-mail: opensuse-security-announce+help ( -at -) opensuse.org