SUSE-SU-2015:0880-1: moderate: Security update for flash-player

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for flash-player
______________________________________________________________________________

Announcement ID:    SUSE-SU-2015:0880-1
Rating:             moderate
References:         #930677 
Cross-References:   CVE-2015-3044 CVE-2015-3077 CVE-2015-3078
                    CVE-2015-3079 CVE-2015-3080 CVE-2015-3081
                    CVE-2015-3082 CVE-2015-3083 CVE-2015-3084
                    CVE-2015-3085 CVE-2015-3086 CVE-2015-3087
                    CVE-2015-3088 CVE-2015-3089 CVE-2015-3090
                    CVE-2015-3091 CVE-2015-3092 CVE-2015-3093
                   
Affected Products:
                    SUSE Linux Enterprise Desktop 11 SP3
______________________________________________________________________________

   An update that fixes 18 vulnerabilities is now available.
   It includes one version update.

Description:


   The Adobe flash-player package was updated to version 11.2.202.460 to fix
   several security issues:

   APSB15-09, CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079,
   CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084,
   CVE-2015-3085, CVE-2015-3086, CVE-2015-3087, CVE-2015-3088, CVE-2015-3089,
   CVE-2015-3090, CVE-2015-3091, CVE-2015-3092, CVE-2015-3093.

   More information can be found at the Adobe Security Bulletin APSB15-09:
   https://helpx.adobe.com/security/products/flash-player/apsb15-09.html
   <https://helpx.adobe.com/security/products/flash-player/apsb15-09.html> .

   Security Issues:

       * CVE-2015-3044
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3044>
       * CVE-2015-3077
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3077>
       * CVE-2015-3078
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3078>
       * CVE-2015-3079
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3079>
       * CVE-2015-3080
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3080>
       * CVE-2015-3081
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3081>
       * CVE-2015-3082
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3082>
       * CVE-2015-3083
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3083>
       * CVE-2015-3084
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3084>
       * CVE-2015-3085
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3085>
       * CVE-2015-3086
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3086>
       * CVE-2015-3087
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3087>
       * CVE-2015-3088
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3088>
       * CVE-2015-3089
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3089>
       * CVE-2015-3090
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3090>
       * CVE-2015-3091
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3091>
       * CVE-2015-3092
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3092>
       * CVE-2015-3093
         <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3093>


Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Desktop 11 SP3:

      zypper in -t patch sledsp3-flash-player=10680

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 11.2.202.460]:

      flash-player-11.2.202.460-0.3.1
      flash-player-gnome-11.2.202.460-0.3.1
      flash-player-kde4-11.2.202.460-0.3.1


References:

   https://www.suse.com/security/cve/CVE-2015-3044.html
   https://www.suse.com/security/cve/CVE-2015-3077.html
   https://www.suse.com/security/cve/CVE-2015-3078.html
   https://www.suse.com/security/cve/CVE-2015-3079.html
   https://www.suse.com/security/cve/CVE-2015-3080.html
   https://www.suse.com/security/cve/CVE-2015-3081.html
   https://www.suse.com/security/cve/CVE-2015-3082.html
   https://www.suse.com/security/cve/CVE-2015-3083.html
   https://www.suse.com/security/cve/CVE-2015-3084.html
   https://www.suse.com/security/cve/CVE-2015-3085.html
   https://www.suse.com/security/cve/CVE-2015-3086.html
   https://www.suse.com/security/cve/CVE-2015-3087.html
   https://www.suse.com/security/cve/CVE-2015-3088.html
   https://www.suse.com/security/cve/CVE-2015-3089.html
   https://www.suse.com/security/cve/CVE-2015-3090.html
   https://www.suse.com/security/cve/CVE-2015-3091.html
   https://www.suse.com/security/cve/CVE-2015-3092.html
   https://www.suse.com/security/cve/CVE-2015-3093.html
   https://bugzilla.suse.com/930677
   https://download.suse.com/patch/finder/?keywords=7d7013992fb3ccd36d13c089427c8daa