Oval Definition:oval:com.redhat.rhsa:def:20151214
Revision Date:2015-07-08Version:602
Title:RHSA-2015:1214: flash-plugin security update (Critical)
Description:The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB15-16 listed in the References section.

  • Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-3123, CVE-2015-3124, CVE-2015-3126, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3130, CVE-2015-3131, CVE-2015-3132, CVE-2015-3133, CVE-2015-3134, CVE-2015-3135, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4429, CVE-2015-4430, CVE-2015-4431, CVE-2015-4432, CVE-2015-4433, CVE-2015-5117, CVE-2015-5118, CVE-2015-5119)

  • Multiple security bypass flaws were found in flash-plugin that could lead to the disclosure of sensitive information. (CVE-2014-0578, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3125, CVE-2015-5116)

    All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.481.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2014-0578
    CVE-2015-3114
    CVE-2015-3115
    CVE-2015-3116
    CVE-2015-3117
    CVE-2015-3118
    CVE-2015-3119
    CVE-2015-3120
    CVE-2015-3121
    CVE-2015-3122
    CVE-2015-3123
    CVE-2015-3124
    CVE-2015-3125
    CVE-2015-3126
    CVE-2015-3127
    CVE-2015-3128
    CVE-2015-3129
    CVE-2015-3130
    CVE-2015-3131
    CVE-2015-3132
    CVE-2015-3133
    CVE-2015-3134
    CVE-2015-3135
    CVE-2015-3136
    CVE-2015-3137
    CVE-2015-4428
    CVE-2015-4429
    CVE-2015-4430
    CVE-2015-4431
    CVE-2015-4432
    CVE-2015-4433
    CVE-2015-5116
    CVE-2015-5117
    CVE-2015-5118
    CVE-2015-5119
    CVE-2015-5124
    RHSA-2015:1214-01
    Platform(s):Supplementary for Red Hat Enterprise Linux 5
    Supplementary for Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 5 is installed
  • AND flash-plugin is earlier than 0:11.2.202.481-1.el5
  • AND flash-plugin is signed with Red Hat redhatrelease key
  • OR Package Information
  • flash-plugin is earlier than 0:11.2.202.481-1.el6_6
  • AND flash-plugin is signed with Red Hat redhatrelease2 key
  • AND
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • BACK