Advisories » MGASA-2017-0114

Updated flash-player-plugin package fixes security vulnerability

Publication date: 21 Apr 2017
Modification date: 21 Apr 2017
Type: security
Affected Mageia releases : 5
CVE: CVE-2017-3058 , CVE-2017-3059 , CVE-2017-3060 , CVE-2017-3061 , CVE-2017-3062 , CVE-2017-3063 , CVE-2017-3064

Description

This update fixes the following critical security issues:
* use-after-free vulnerabilities that could lead to code execution
  (CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063). 
* memory corruption vulnerabilities that could lead to code execution
  (CVE-2017-3060, CVE-2017-3061, CVE-2017-3064).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20696
• https://helpx.adobe.com/security/products/flash-player/apsb17-10.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3058
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3059
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3060
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3061
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3062
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3063
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3064

SRPMS

5/nonfree

• flash-player-plugin-25.0.0.148-1.1.mga5.nonfree