Advisories » MGASA-2018-0315

Updated flash-player-plugin packages fix security vulnerabilities

Publication date: 13 Jul 2018
Modification date: 13 Jul 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-5007 , CVE-2018-5008

Description

Updated flash-player-plugin packages fix security vulnerabilities:
* A type confusion vulnerability that could lead to arbitrary code
  execution (CVE-2018-5007).
* An out of bounds read that could lead to information disclosure
  (CVE-2018-5008).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23292
• https://helpx.adobe.com/security/products/flash-player/apsb18-24.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5007
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5008

SRPMS

6/nonfree

• flash-player-plugin-30.0.0.134-1.mga6.nonfree