Index: head/security/vuxml/vuln.xml =================================================================== --- head/security/vuxml/vuln.xml +++ head/security/vuxml/vuln.xml @@ -58,6 +58,59 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + flash -- multiple vulnerabilities + + + linux-c6-flashplugin + linux-c6_64-flashplugin + linux-c7-flashplugin + linux-f10-flashplugin + 11.2r202.637 + + + + +

Adobe reports:

+
Adobe has released security updates for Adobe Flash Player for + Windows, Macintosh, Linux and ChromeOS. These updates address + critical vulnerabilities that could potentially allow an attacker + to take control of the affected system.
+
These updates resolve a type confusion vulnerability that could + lead to code execution (CVE-2016-6992).
+
These updates resolve use-after-free vulnerabilities that could + lead to code execution (CVE-2016-6981, CVE-2016-6987).
+
These updates resolve a security bypass vulnerability + (CVE-2016-4286).
+
These updates resolve memory corruption vulnerabilities that could + lead to code execution (CVE-2016-4273, CVE-2016-6982, + CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, + CVE-2016-6989, CVE-2016-6990).
+

+ + + + CVE-2016-4273 + CVE-2016-4286 + CVE-2016-6981 + CVE-2016-6982 + CVE-2016-6983 + CVE-2016-6984 + CVE-2016-6985 + CVE-2016-6986 + CVE-2016-6987 + CVE-2016-6989 + CVE-2016-6990 + CVE-2016-6992 + https://helpx.adobe.com/security/products/flash-player/apsb16-32.html + + + 2016-10-11 + 2016-10-24 + + + mozilla -- multiple vulnerabilities