An update for flash-plugin is now available for Red Hat Enterprise Linux 5Supplementary and Red Hat Enterprise Linux 6 Supplementary.Red Hat Product Security has rated this update as having a security impact ofCritical.

A Common Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe FlashPlayer web browser plug-in.This update upgrades Flash Player to version 11.2.202.621.Security Fix(es):* This update fixes multiple vulnerabilities in Adobe Flash Player.

Thesevulnerabilities, detailed in the Adobe Security Bulletin listed in theReferences section, could allow an attacker to create a specially crafted SWFfile that would cause flash-plugin to crash, execute arbitrary code, or disclosesensitive information when the victim loaded a page containing the malicious SWFcontent. (CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099,CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1104,CVE-2016-1105, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109,CVE-2016-1110, CVE-2016-4108, CVE-2016-4109, CVE-2016-4110, CVE-2016-4111,CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4116,CVE-2016-4117)
RHEL Desktop Supplementary (v. 5 client)

IA-32:
flash-plugin-11.2.202.621-1.el5.i386.rpm
    MD5: f1fa94c5da1d705d401efb35fc9ffe72SHA-256: 96c078592c88ec182f734d3df5fb96aaeac51a932aa6526ed5f8c0b77e1b3c69
 
x86_64:
flash-plugin-11.2.202.621-1.el5.i386.rpm
    MD5: f1fa94c5da1d705d401efb35fc9ffe72SHA-256: 96c078592c88ec182f734d3df5fb96aaeac51a932aa6526ed5f8c0b77e1b3c69
 
RHEL Supplementary (v. 5 server)

IA-32:
flash-plugin-11.2.202.621-1.el5.i386.rpm
    MD5: f1fa94c5da1d705d401efb35fc9ffe72SHA-256: 96c078592c88ec182f734d3df5fb96aaeac51a932aa6526ed5f8c0b77e1b3c69
 
x86_64:
flash-plugin-11.2.202.621-1.el5.i386.rpm
    MD5: f1fa94c5da1d705d401efb35fc9ffe72SHA-256: 96c078592c88ec182f734d3df5fb96aaeac51a932aa6526ed5f8c0b77e1b3c69
 
Red Hat Enterprise Linux Desktop Supplementary (v. 6)

IA-32:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
x86_64:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
Red Hat Enterprise Linux Server Supplementary (v. 6)

IA-32:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
x86_64:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
Red Hat Enterprise Linux Workstation Supplementary (v. 6)

IA-32:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
x86_64:
flash-plugin-11.2.202.621-1.el6_8.i686.rpm
    MD5: 96303653018a1d53fed1e20f83cd71d5SHA-256: 10f4d18cb92f245b524fd3ec30f09ab5444f8f3f0670675657413b84d4672c50
 
(The unlinked packages above are only available from the Red Hat Network)
1335058 – flash-plugin: multiple code execution issues fixed in APSB16-15

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from: