Red Hat Security Advisory: flash-plugin security update

Fixed packages 1

Vulnerabilities 2

• Unscored —
  CVE-2017-3085

  Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information discl…

  Adobe Flash Player flashplugin-nonfree Ubuntu
  Aug 11, 2017
• Unscored —
  CVE-2017-3106 Public exploit EPSS 22%

  Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fi…

  Adobe Flash Player flashplugin-nonfree Ubuntu
  Aug 11, 2017

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://helpx.adobe.com/security/products/flash-player/apsb17-23.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1479887
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1479888
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2457.json
• report
  https://access.redhat.com/security/cve/CVE-2017-3085
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-3085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-3085
• report
  https://access.redhat.com/security/cve/CVE-2017-3106
• advisory
  https://www.cve.org/CVERecord?id=CVE-2017-3106
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2017-3106