advisories/23950.adv

type: security
subject: Updated flash-player-plugin packages fix security vulnerability
CVE:
 - CVE-2018-15982
 - CVE-2018-15983
src:
  6:
   nonfree:
     - flash-player-plugin-32.0.0.101-1.mga6.nonfree
description: |
  Use after free flaw enabling arbitrary code execution. (CVE-2018-15982)

  Insecure Library Loading (DLL hijacking) flaw enabling privilege escalation.
  (CVE-2018-15983)
references:
 - https://bugs.mageia.org/show_bug.cgi?id=23950
 - https://helpx.adobe.com/security/products/flash-player/apsb18-42.html
ID: MGASA-2018-0478
1	type: security
2	subject: Updated flash-player-plugin packages fix security vulnerability
3	CVE:
4	- CVE-2018-15982
5	- CVE-2018-15983
6	src:
7	6:
8	nonfree:
9	- flash-player-plugin-32.0.0.101-1.mga6.nonfree
10	description: \|
11	Use after free flaw enabling arbitrary code execution. (CVE-2018-15982)
12
13	Insecure Library Loading (DLL hijacking) flaw enabling privilege escalation.
14	(CVE-2018-15983)
15	references:
16	- https://bugs.mageia.org/show_bug.cgi?id=23950
17	- https://helpx.adobe.com/security/products/flash-player/apsb18-42.html
18	ID: MGASA-2018-0478