Advisories » MGASA-2017-0172

Updated flash-player-plugin packages fix security vulnerabilities

Publication date: 14 Jun 2017
Modification date: 14 Jun 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-3075 , CVE-2017-3081 , CVE-2017-3083 , CVE-2017-3084 , CVE-2017-3076 , CVE-2017-3077 , CVE-2017-3078 , CVE-2017-3079 , CVE-2017-3082

Description

Adobe Flash Player 26.0.0.126 contains fixes to critical security
vulnerabilities found in earlier versions that could potentially allow
an attacker to take control of the affected system.

This update resolves use-after-free vulnerabilities and memory
corruption vulnerabilities that could lead to code execution
(CVE-2017-3075, CVE-2017-3081, CVE-2017-3083, CVE-2017-3084,
CVE-2017-3076, CVE-2017-3077, CVE-2017-3078, CVE-2017-3079,
CVE-2017-3082).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=21083
• https://helpx.adobe.com/security/products/flash-player/apsb17-17.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3075
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3081
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3083
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3084
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3076
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3077
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3078
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3079
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3082

SRPMS

5/nonfree

• flash-player-plugin-26.0.0.126-1.mga5.nonfree