Red Hat Security Advisory: acroread security update
🔗 CVE IDs covered (42)
📋 Description
CVE-2011-2094 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2095 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2096 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2097 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2098 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2099 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2101 — acroread: multiple code execution flaws (APSB11-16) CVE-2011-2104 — acroread: Multiple denial of service flaws (APSB11-16) CVE-2011-2105 — acroread: Multiple denial of service flaws (APSB11-16) CVE-2011-2107 — flash-plugin: Cross-site scripting vulnerability (APSB11-13) CVE-2011-2130 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2134 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2135 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2136 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2137 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2138 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2139 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2140 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2414 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2415 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2416 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2417 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2424 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2425 — flash-plugin: multiple arbitrary code execution flaws (APSB-11-21) CVE-2011-2426 — flash-plugin: critical flaws fixed in APSB11-26 CVE-2011-2427 — flash-plugin: critical flaws fixed in APSB11-26 CVE-2011-2428 — flash-plugin: critical flaws fixed in APSB11-26 CVE-2011-2429 — flash-plugin: security control bypass information disclosure fixed in APSB11-26 CVE-2011-2430 — flash-plugin: critical flaws fixed in APSB11-26 CVE-2011-2431 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2432 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2433 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2434 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2435 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2436 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2437 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2438 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2439 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2440 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2442 — acroread: multiple code execution flaws (APSB11-24) CVE-2011-2444 — flash-plugin: Cross-site scripting vulnerability fixed in APSB11-26 CVE-2011-4374 — acroread: multiple code execution flaws (APSB11-24)
🎯 Affected products27
- Red Hat Desktop version 4 Extras
- Red Hat Enterprise Linux AS version 4 Extras
- Red Hat Enterprise Linux Desktop Supplementary (v. 5)
- Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- Red Hat Enterprise Linux ES version 4 Extras
- Red Hat Enterprise Linux Server Supplementary (v. 5)
- Red Hat Enterprise Linux Server Supplementary (v. 6)
- Red Hat Enterprise Linux WS version 4 Extras
- Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- acroread-0:9.4.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras
- acroread-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras
- acroread-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras
- acroread-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras
- acroread-0:9.4.6-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
- acroread-0:9.4.6-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- acroread-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- acroread-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- acroread-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
- acroread-plugin-0:9.4.6-1.el4.i386 as a component of Red Hat Desktop version 4 Extras
- acroread-plugin-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras
- acroread-plugin-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras
- acroread-plugin-0:9.4.6-1.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras
- acroread-plugin-0:9.4.6-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
- acroread-plugin-0:9.4.6-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
- acroread-plugin-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
- acroread-plugin-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
- acroread-plugin-0:9.4.6-1.el6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)
✅ Remediation
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2011:1434
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttp://www.adobe.com/support/security/bulletins/apsb11-21.html
- externalhttp://www.adobe.com/support/security/bulletins/apsb11-24.html
- externalhttp://www.adobe.com/support/security/bulletins/apsb11-26.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=729497
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=740201
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=740204
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=740388
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=749381
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1434.json