Advisories » MGASA-2019-0149

Updated flash-player-plugin packages fix security vulnerability

Publication date: 10 Apr 2019
Modification date: 10 Apr 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2019-7096 , CVE-2019-7108

Description

An out-of-bounds read that leads to information disclosure. (CVE-2019-7108)

A use after free that leads to arbitrary code execution. (CVE-2019-7096)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24643
• https://helpx.adobe.com/security/products/flash-player/apsb19-19.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7096
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7108

SRPMS

6/nonfree

• flash-player-plugin-32.0.0.171-1.mga6.nonfree