Security update for flash-player

SUSE Security Update: Security update for flash-player

---

Announcement ID:	SUSE-SU-2012:0437-1
Rating:	critical
References:	#754689
Affected Products:	SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4

---

An update that fixes one vulnerability is now available. It includes two new package versions.

Description:

Adobe Flash Player 11.1.102.63 fixes a memory corruption
vulnerability in the NetStream class that could have lead
to code execution (CVE-2012-0773).

Security Issue reference:

* CVE-2012-0773
>

Patch Instructions:

To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Desktop 11 SP2:
  zypper in -t patch sledsp1-flash-player-6059
• SUSE Linux Enterprise Desktop 11 SP1:
  zypper in -t patch sledsp1-flash-player-6059

To bring your system up-to-date, use "zypper patch".

Package List:

• SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 11.2.202.228]:

• flash-player-11.2.202.228-0.3.1
• SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64) [New Version: 11.2.202.228]:

• flash-player-11.2.202.228-0.3.1
• SUSE Linux Enterprise Desktop 10 SP4 (i586) [New Version: 10.3.183.18]:

• flash-player-10.3.183.18-0.5.2

References:

• http://support.novell.com/security/cve/CVE-2012-0773.html
• https://bugzilla.novell.com/754689
• http://download.suse.com/patch/finder/?keywords=03280de9cddaad9751a83521641289ac
• http://download.suse.com/patch/finder/?keywords=144a85c0189094a03103ec1018241f01