Updated flash-player-plugin packages fix security vulnerabilities
Publication date: 19 Aug 2018Modification date: 19 Aug 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-12824 , CVE-2018-12825 , CVE-2018-12826 , CVE-2018-12827 , CVE-2018-12828
Description
Updated flash-player-plugin packages fix security vulnerabilities: * Out-of-bounds read that can lead to Information Disclosure (CVE-2018-12824, CVE-2018-12826, CVE-2018-12827) * Security bypass that can lead to Security Mitigation Bypass (CVE-2018-12825) * Use of a component with a known vulnerability can lead to a Privilege Escalation (CVE-2018-12828)
References
- https://bugs.mageia.org/show_bug.cgi?id=23464
- https://helpx.adobe.com/security/products/flash-player/apsb18-25.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12824
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12825
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12826
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12827
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12828
SRPMS
6/nonfree
- flash-player-plugin-30.0.0.154-1.mga6.nonfree