Uočeno je i ispravljeno više sigurnosnih propusta kod programskog paketa Adobe Flash Player. Napadači su ih mogli iskoristiti za DoS (eng. Denial of Service) napad, proizvoljno pokretanje programskog koda, zaobilaženje postavljenih ograničenja i otkrivanje osjetljivih informacija.

   openSUSE Security Update: flash-player: Update to 11.2.202.236 security
release
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2012:0723-1
Rating:             critical
References:         #761975 #766241 
Cross-References:   CVE-2012-2034 CVE-2012-2035 CVE-2012-2036
                    CVE-2012-2037 CVE-2012-2038 CVE-2012-2039
                    CVE-2012-2040
Affected Products:
                    openSUSE 12.1
                    openSUSE 11.4
______________________________________________________________________________

   An update that fixes 7 vulnerabilities is now available.

Description:

   Adobe Flash Player was updated to 11.2.202.236, fixing lots
   of bugs and critical security issues.

   We also disabled inclusion of mms.cfg again,  as it caused
   trouble on hardware accelerated systems.


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 12.1:

      zypper in -t patch openSUSE-2012-315

   - openSUSE 11.4:

      zypper in -t patch openSUSE-2012-315

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 12.1 (i586 x86_64):

      flash-player-11.2.202.236-24.1
      flash-player-gnome-11.2.202.236-24.1
      flash-player-kde4-11.2.202.236-24.1

   - openSUSE 11.4 (i586 x86_64):

      flash-player-11.2.202.236-17.1
      flash-player-gnome-11.2.202.236-17.1
      flash-player-kde4-11.2.202.236-17.1


References:

   http://support.novell.com/security/cve/CVE-2012-2034.html
   http://support.novell.com/security/cve/CVE-2012-2035.html
   http://support.novell.com/security/cve/CVE-2012-2036.html
   http://support.novell.com/security/cve/CVE-2012-2037.html
   http://support.novell.com/security/cve/CVE-2012-2038.html
   http://support.novell.com/security/cve/CVE-2012-2039.html
   http://support.novell.com/security/cve/CVE-2012-2040.html
   https://bugzilla.novell.com/761975
   https://bugzilla.novell.com/766241

-- 
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.