{"id":"SUSE-SU-2016:2312-1","summary":"Security update for flash-player","details":"This update for flash-player fixes the following security issues (APSB16-29, boo#998589):\n\n- integer overflow vulnerability that could lead to code execution (CVE-2016-4287). \n- use-after-free vulnerabilities that could lead to code execution (CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, CVE-2016-6932)\n- security bypass vulnerabilities that could lead to information disclosure (CVE-2016-4271, CVE-2016-4277, CVE-2016-4278)\n- memory corruption vulnerabilities that could lead to code execution (CVE-2016-4182, CVE-2016-4237, CVE-2016-4238, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924)\n","modified":"2026-02-04T04:20:31.742232Z","published":"2016-09-15T08:40:57Z","related":["CVE-2016-4182","CVE-2016-4237","CVE-2016-4238","CVE-2016-4271","CVE-2016-4272","CVE-2016-4274","CVE-2016-4275","CVE-2016-4276","CVE-2016-4277","CVE-2016-4278","CVE-2016-4279","CVE-2016-4280","CVE-2016-4281","CVE-2016-4282","CVE-2016-4283","CVE-2016-4284","CVE-2016-4285","CVE-2016-4287","CVE-2016-6921","CVE-2016-6922","CVE-2016-6923","CVE-2016-6924","CVE-2016-6925","CVE-2016-6926","CVE-2016-6927","CVE-2016-6929","CVE-2016-6930","CVE-2016-6931","CVE-2016-6932"],"upstream":["CVE-2016-4182","CVE-2016-4237","CVE-2016-4238","CVE-2016-4271","CVE-2016-4272","CVE-2016-4274","CVE-2016-4275","CVE-2016-4276","CVE-2016-4277","CVE-2016-4278","CVE-2016-4279","CVE-2016-4280","CVE-2016-4281","CVE-2016-4282","CVE-2016-4283","CVE-2016-4284","CVE-2016-4285","CVE-2016-4287","CVE-2016-6921","CVE-2016-6922","CVE-2016-6923","CVE-2016-6924","CVE-2016-6925","CVE-2016-6926","CVE-2016-6927","CVE-2016-6929","CVE-2016-6930","CVE-2016-6931","CVE-2016-6932"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162312-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/998589"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4182"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4237"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4238"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4271"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4272"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4274"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4275"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4276"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4277"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4278"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4279"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4281"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4282"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4284"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4285"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4287"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6921"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6924"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6925"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6926"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6927"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6929"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6931"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6932"}],"affected":[{"package":{"name":"flash-player","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","purl":"pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.635-140.1"}]}],"ecosystem_specific":{"binaries":[{"flash-player-gnome":"11.2.202.635-140.1","flash-player":"11.2.202.635-140.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2312-1.json"}},{"package":{"name":"flash-player","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","purl":"pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.202.635-140.1"}]}],"ecosystem_specific":{"binaries":[{"flash-player-gnome":"11.2.202.635-140.1","flash-player":"11.2.202.635-140.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2016:2312-1.json"}}],"schema_version":"1.7.3"}