{"affected":[{"ecosystem_specific":{"binaries":[{"flash-player":"11.2.202.635-140.1","flash-player-gnome":"11.2.202.635-140.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","name":"flash-player","purl":"pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.2.202.635-140.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"flash-player":"11.2.202.635-140.1","flash-player-gnome":"11.2.202.635-140.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","name":"flash-player","purl":"pkg:rpm/suse/flash-player&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"11.2.202.635-140.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for flash-player fixes the following security issues (APSB16-29, boo#998589):\n\n- integer overflow vulnerability that could lead to code execution (CVE-2016-4287). \n- use-after-free vulnerabilities that could lead to code execution (CVE-2016-4272, CVE-2016-4279, CVE-2016-6921, CVE-2016-6923, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, CVE-2016-6932)\n- security bypass vulnerabilities that could lead to information disclosure (CVE-2016-4271, CVE-2016-4277, CVE-2016-4278)\n- memory corruption vulnerabilities that could lead to code execution (CVE-2016-4182, CVE-2016-4237, CVE-2016-4238, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-6922, CVE-2016-6924)\n","id":"SUSE-SU-2016:2312-1","modified":"2016-09-15T08:40:57Z","published":"2016-09-15T08:40:57Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162312-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/998589"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4182"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4237"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4238"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4271"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4272"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4274"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4275"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4276"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4277"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4278"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4279"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4281"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4282"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4283"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4284"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4285"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-4287"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6921"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6922"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6924"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6925"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6926"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6927"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6929"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6930"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6931"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2016-6932"}],"related":["CVE-2016-4182","CVE-2016-4237","CVE-2016-4238","CVE-2016-4271","CVE-2016-4272","CVE-2016-4274","CVE-2016-4275","CVE-2016-4276","CVE-2016-4277","CVE-2016-4278","CVE-2016-4279","CVE-2016-4280","CVE-2016-4281","CVE-2016-4282","CVE-2016-4283","CVE-2016-4284","CVE-2016-4285","CVE-2016-4287","CVE-2016-6921","CVE-2016-6922","CVE-2016-6923","CVE-2016-6924","CVE-2016-6925","CVE-2016-6926","CVE-2016-6927","CVE-2016-6929","CVE-2016-6930","CVE-2016-6931","CVE-2016-6932"],"summary":"Security update for flash-player","upstream":["CVE-2016-4182","CVE-2016-4237","CVE-2016-4238","CVE-2016-4271","CVE-2016-4272","CVE-2016-4274","CVE-2016-4275","CVE-2016-4276","CVE-2016-4277","CVE-2016-4278","CVE-2016-4279","CVE-2016-4280","CVE-2016-4281","CVE-2016-4282","CVE-2016-4283","CVE-2016-4284","CVE-2016-4285","CVE-2016-4287","CVE-2016-6921","CVE-2016-6922","CVE-2016-6923","CVE-2016-6924","CVE-2016-6925","CVE-2016-6926","CVE-2016-6927","CVE-2016-6929","CVE-2016-6930","CVE-2016-6931","CVE-2016-6932"]}