RHSA-2015:1086Critical

Red Hat Security Advisory: flash-plugin security update

Published
June 10, 2015
Last Modified
November 2, 2026

🔗 CVE IDs covered (11)

CVE-2015-3096 →CVE-2015-3098 →CVE-2015-3099 →CVE-2015-3100 →CVE-2015-3102 →CVE-2015-3103 →CVE-2015-3104 →CVE-2015-3105 →CVE-2015-3106 →CVE-2015-3107 →CVE-2015-3108 →

📋 Description

CVE-2015-3096 — flash-plugin: cross-site request forgery against JSONP endpoints fixed in APSB15-11 (incomplete fix for CVE-2014-5333) CVE-2015-3098 — flash-plugin: same-origin-policy bypass fixed in APSB15-11 CVE-2015-3099 — flash-plugin: same-origin-policy bypass fixed in APSB15-11 CVE-2015-3100 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3102 — flash-plugin: same-origin-policy bypass fixed in APSB15-11 CVE-2015-3103 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3104 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3105 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3106 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3107 — flash-plugin: multiple code execution issues fixed in APSB15-11 CVE-2015-3108 — flash-plugin: information leak leading to ASLR bypass (APSB15-11)

🎯 Affected products10

  • Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • Red Hat Enterprise Linux Server Supplementary (v. 5)
  • Red Hat Enterprise Linux Server Supplementary (v. 6)
  • Red Hat Enterprise Linux Workstation Supplementary (v. 6)
  • flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 5)
  • flash-plugin-0:11.2.202.466-1.el5.i386 as a component of Red Hat Enterprise Linux Server Supplementary (v. 5)
  • flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Desktop Supplementary (v. 6)
  • flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Server Supplementary (v. 6)
  • flash-plugin-0:11.2.202.466-1.el6_6.i686 as a component of Red Hat Enterprise Linux Workstation Supplementary (v. 6)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (8)