[gentoo-announce] [ GLSA 201711-13 ] Adobe Flash Player: Multiple vulnerabilities - gentoo-announce

From:	"Christopher Díaz Riveros" <chrisadr@g.o>
To:	gentoo-announce@l.g.o
Subject:	[gentoo-announce] [ GLSA 201711-13 ] Adobe Flash Player: Multiple vulnerabilities
Date:	Sun, 19 Nov 2017 20:27:40
Message-Id:	`1511123169.29347.46.camel@gentoo.org`

1

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

2

Gentoo Linux Security Advisory                           GLSA 201711-13

3

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

4

                                           https://security.gentoo.org/

5

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

6

7

 Severity: Normal

8

    Title: Adobe Flash Player: Multiple vulnerabilities

9

     Date: November 19, 2017

10

     Bugs: #637630

11

       ID: 201711-13

12

13

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

14

15

Synopsis

16

========

17

18

Multiple vulnerabilities have been found in Adobe Flash Player, the

19

worst of which allows remote attackers to execute arbitrary code.

20

21

Background

22

==========

23

24

The Adobe Flash Player is a renderer for the SWF file format, which is

25

commonly used to provide interactive websites.

26

27

Affected packages

28

=================

29

30

    -------------------------------------------------------------------

31

     Package              /     Vulnerable     /            Unaffected

32

    -------------------------------------------------------------------

33

  1  www-plugins/adobe-flash    < 27.0.0.187            >= 27.0.0.187 

34

35

Description

36

===========

37

38

Multiple vulnerabilities have been discovered in Adobe Flash Player.

39

Please review the referenced CVE identifiers and Adobe Security

40

Bulletin for details.

41

42

Impact

43

======

44

45

A remote attacker could possibly execute arbitrary code with the

46

privileges of the process.

47

48

Workaround

49

==========

50

51

There is no known workaround at this time.

52

53

Resolution

54

==========

55

56

All Adobe Flash Player users should upgrade to the latest version:

57

58

  # emerge --sync

59

  # emerge --ask --oneshot -v ">=www-plugins/adobe-flash-27.0.0.187"

60

61

References

62

==========

63

64

[ 1 ] Adobe Security Bulletin

65

      https://helpx.adobe.com/security/products/flash-player/apsb17-33.

66

html

67

[ 2 ] CVE-2017-11213

68

      https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11213

69

[ 3 ] CVE-2017-11215

70

      https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11215

71

[ 4 ] CVE-2017-11225

72

      https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11225

73

[ 5 ] CVE-2017-3112

74

      https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3112

75

[ 6 ] CVE-2017-3114

76

      https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3114

77

78

Availability

79

============

80

81

This GLSA and any updates to it are available for viewing at

82

the Gentoo Security Website:

83

84

 https://security.gentoo.org/glsa/201711-13

85

86

Concerns?

87

=========

88

89

Security is a primary focus of Gentoo Linux and ensuring the

90

confidentiality and security of our users' machines is of utmost

91

importance to us. Any security concerns should be addressed to

92

security@g.o or alternatively, you may file a bug at

93

https://bugs.gentoo.org.

94

95

License

96

=======

97

98

Copyright 2017 Gentoo Foundation, Inc; referenced text

99

belongs to its owner(s).

100

101

The contents of this document are licensed under the

102

Creative Commons - Attribution / Share Alike license.

103

104

http://creativecommons.org/licenses/by-sa/2.5

Gentoo Archives: gentoo-announce

Attachments

1	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
2	Gentoo Linux Security Advisory GLSA 201711-13
3	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
4	https://security.gentoo.org/
5	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
6
7	Severity: Normal
8	Title: Adobe Flash Player: Multiple vulnerabilities
9	Date: November 19, 2017
10	Bugs: #637630
11	ID: 201711-13
12
13	- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
14
15	Synopsis
16	========
17
18	Multiple vulnerabilities have been found in Adobe Flash Player, the
19	worst of which allows remote attackers to execute arbitrary code.
20
21	Background
22	==========
23
24	The Adobe Flash Player is a renderer for the SWF file format, which is
25	commonly used to provide interactive websites.
26
27	Affected packages
28	=================
29
30	-------------------------------------------------------------------
31	Package / Vulnerable / Unaffected
32	-------------------------------------------------------------------
33	1 www-plugins/adobe-flash < 27.0.0.187 >= 27.0.0.187
34
35	Description
36	===========
37
38	Multiple vulnerabilities have been discovered in Adobe Flash Player.
39	Please review the referenced CVE identifiers and Adobe Security
40	Bulletin for details.
41
42	Impact
43	======
44
45	A remote attacker could possibly execute arbitrary code with the
46	privileges of the process.
47
48	Workaround
49	==========
50
51	There is no known workaround at this time.
52
53	Resolution
54	==========
55
56	All Adobe Flash Player users should upgrade to the latest version:
57
58	# emerge --sync
59	# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-27.0.0.187"
60
61	References
62	==========
63
64	[ 1 ] Adobe Security Bulletin
65	https://helpx.adobe.com/security/products/flash-player/apsb17-33.
66	html
67	[ 2 ] CVE-2017-11213
68	https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11213
69	[ 3 ] CVE-2017-11215
70	https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11215
71	[ 4 ] CVE-2017-11225
72	https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-11225
73	[ 5 ] CVE-2017-3112
74	https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3112
75	[ 6 ] CVE-2017-3114
76	https://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-3114
77
78	Availability
79	============
80
81	This GLSA and any updates to it are available for viewing at
82	the Gentoo Security Website:
83
84	https://security.gentoo.org/glsa/201711-13
85
86	Concerns?
87	=========
88
89	Security is a primary focus of Gentoo Linux and ensuring the
90	confidentiality and security of our users' machines is of utmost
91	importance to us. Any security concerns should be addressed to
92	security@g.o or alternatively, you may file a bug at
93	https://bugs.gentoo.org.
94
95	License
96	=======
97
98	Copyright 2017 Gentoo Foundation, Inc; referenced text
99	belongs to its owner(s).
100
101	The contents of this document are licensed under the
102	Creative Commons - Attribution / Share Alike license.
103
104	http://creativecommons.org/licenses/by-sa/2.5