Mageia alert MGASA-2018-0072 (flash-player-plugin)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2018-0072: Updated flash-player-plugin package fixes security vulnerability 
Date:
    	     
 
Fri, 12 Jan 2018 20:50:14 +0100
Message-ID:
    	     
 
<20180112195014.5F5B6A00A3@duvel.mageia.org>
MGASA-2018-0072 - Updated flash-player-plugin package fixes security vulnerability

Publication date: 12 Jan 2018
URL: https://advisories.mageia.org/MGASA-2018-0072.html
Type: security
Affected Mageia releases: 6
CVE: CVE-2018-4871

Description:
Adobe Flash Player 28.0.0.137 addresses an important out-of-bounds read
vulnerability that could lead to information exposure (CVE-2018-4871).

References:
- https://bugs.mageia.org/show_bug.cgi?id=22367
- https://helpx.adobe.com/security/products/flash-player/ap...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4871

SRPMS:
- 6/nonfree/flash-player-plugin-28.0.0.137-1.mga6.nonfree