U radu programskog paketa flash-player uočeno je i ispravljeno nekoliko sigurnosnih propusta. Napadači ih mogu iskoristiti za izvođenje DoS i XSS napada, pokretanje proizvoljnog programskog koda te za zaobilaženje postavljenih ograničenja.

   SUSE Security Update: Security update for flash-player
______________________________________________________________________________

Announcement ID:    SUSE-SU-2012:0299-1
Rating:             critical
References:         #747297 
Cross-References:   CVE-2012-0752 CVE-2012-0753 CVE-2012-0754
                    CVE-2012-0755 CVE-2012-0756 CVE-2012-0767
                   
Affected Products:
                    SUSE Linux Enterprise Desktop 10 SP4
______________________________________________________________________________

   An update that fixes 6 vulnerabilities is now available. It
   includes one version update.

Description:


   This version upgrade of flash-player fixes multiple
   security issues that  could potentially be exploited to
   cause a crash or even execute arbitrary  code. The
   following CVE were assigned:

   CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755
   CVE-2012-0756  CVE-2012-0767

   Security Issue references:

   * CVE-2012-0752
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0752
   >
   * CVE-2012-0753
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0753
   >
   * CVE-2012-0754
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0754
   >
   * CVE-2012-0755
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0755
   >
   * CVE-2012-0756
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0756
   >
   * CVE-2012-0767
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0767
   >



Package List:

   - SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 10.3.183.15]:

      flash-player-10.3.183.15-0.6.1


References:

   http://support.novell.com/security/cve/CVE-2012-0752.html
   http://support.novell.com/security/cve/CVE-2012-0753.html
   http://support.novell.com/security/cve/CVE-2012-0754.html
   http://support.novell.com/security/cve/CVE-2012-0755.html
   http://support.novell.com/security/cve/CVE-2012-0756.html
   http://support.novell.com/security/cve/CVE-2012-0767.html
   https://bugzilla.novell.com/747297
  
http://download.novell.com/patch/finder/?keywords=c3d08777a2397ababaa7778f2881067f

-- 
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.