flash-player was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in
the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
remote attackers to execute arbitrary code or cause a denial of service
(memory corruption) via crafted Flash content that overrides a valueOf
function (bsc#937752).
- CVE-2015-5122: Use-after-free vulnerability in the DisplayObject class
in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed
remote attackers to execute arbitrary code or cause a denial of service
(memory corruption) via crafted Flash content that leverages improper
handling of the opaqueBackground property (bsc#937752).
- Submitted by Wolfgang Rosenauer (wrosenauer)