Bug 27432 - flash-player-plugin security update 32.0.0.445
Summary: flash-player-plugin security update 32.0.0.445
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2020-10-16 11:44 CEST by Nicolas Salguero
Modified: 2020-10-16 17:46 CEST (History)
3 users (show)

See Also:
Source RPM: flash-player-plugin
CVE: CVE-2020-9746
Status comment:


Attachments

Description Nicolas Salguero 2020-10-16 11:44:39 CEST
Hi,

Version 32.0.0.445 fixes CVE-2020-9746.

References:
https://helpx.adobe.com/security/products/flash-player/apsb20-58.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9746

Best regards,

Nico.
Comment 1 Nicolas Salguero 2020-10-16 11:50:37 CEST
Suggested advisory:
========================

The updated packages fix a security vulnerability:

NULL Pointer Dereference that leads to arbitrary code execution in the context of the current user. (CVE-2020-9746)

References:
https://helpx.adobe.com/security/products/flash-player/apsb20-58.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9746
========================

Updated packages in core/updates_testing:
========================
flash-player-plugin-32.0.0.445-1.mga7.nonfree

from SRPMS:
flash-player-plugin-32.0.0.445-1.mga7.nonfree.src.rpm

CVE: (none) => CVE-2020-9746
Source RPM: (none) => flash-player-plugin
Assignee: bugsquad => qa-bugs
Status: NEW => ASSIGNED

Comment 2 Herman Viaene 2020-10-16 16:01:51 CEST
MGA7-64 Plasma on Lenovo B50
No installation issues.
Ref bug 27264 to test: site responds: "You have version 32,0,0,445 installed"
So OK for me.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA7-64-OK

Comment 3 Aurelien Oudelet 2020-10-16 16:28:10 CEST
Validating_update

Advisory:
========================

The updated package fixes a security vulnerability:

NULL Pointer Dereference that leads to arbitrary code execution in the context of the current user. (CVE-2020-9746)

References:
https://helpx.adobe.com/security/products/flash-player/apsb20-58.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9746
========================

SRPMS:
flash-player-plugin-32.0.0.445-1.mga7.nonfree.src.rpm

Keywords: (none) => advisory, validated_update
CC: (none) => ouaurelien, sysadmin-bugs

Comment 4 Mageia Robot 2020-10-16 17:46:31 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0386.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.