<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for flash-player</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2015:2247-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2015-12-10T11:09:42Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2015-12-10T11:09:42Z</InitialReleaseDate>
    <CurrentReleaseDate>2015-12-10T11:09:42Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for flash-player</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This update for flash-player to version 11.2.202.554 fixes the following security issues
in Adobe security advisory APSB15-32.

* These updates resolve heap buffer overflow vulnerabilities that could
  lead to code execution (CVE-2015-8438, CVE-2015-8446).
* These updates resolve memory corruption vulnerabilities that could
  lead to code execution (CVE-2015-8444, CVE-2015-8443, CVE-2015-8417,
  CVE-2015-8416, CVE-2015-8451, CVE-2015-8047, CVE-2015-8455, CVE-2015-8045,
  CVE-2015-8418, CVE-2015-8060, CVE-2015-8419, CVE-2015-8408).
* These updates resolve security bypass vulnerabilities (CVE-2015-8453,
  CVE-2015-8440, CVE-2015-8409).
* These updates resolve a stack overflow vulnerability that could lead
  to code execution (CVE-2015-8407).
* These updates resolve a type confusion vulnerability that could lead
  to code execution (CVE-2015-8439).
* These updates resolve an integer overflow vulnerability that could
  lead to code execution (CVE-2015-8445).
* These updates resolve a buffer overflow vulnerability that could lead
  to code execution (CVE-2015-8415)
* These updates resolve use-after-free vulnerabilities that could
  lead to code execution (CVE-2015-8050, CVE-2015-8049, CVE-2015-8437,
  CVE-2015-8450, CVE-2015-8449, CVE-2015-8448, CVE-2015-8436, CVE-2015-8452,
  CVE-2015-8048, CVE-2015-8413, CVE-2015-8412, CVE-2015-8410, CVE-2015-8411,
  CVE-2015-8424, CVE-2015-8422, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423,
  CVE-2015-8425, CVE-2015-8433, CVE-2015-8432, CVE-2015-8431, CVE-2015-8426,
  CVE-2015-8430, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8434,
  CVE-2015-8435, CVE-2015-8414, CVE-2015-8454, CVE-2015-8059, CVE-2015-8058,
  CVE-2015-8055, CVE-2015-8057, CVE-2015-8056, CVE-2015-8061, CVE-2015-8067,
  CVE-2015-8066, CVE-2015-8062, CVE-2015-8068, CVE-2015-8064, CVE-2015-8065,
  CVE-2015-8063, CVE-2015-8405, CVE-2015-8404, CVE-2015-8402, CVE-2015-8403,
  CVE-2015-8071, CVE-2015-8401, CVE-2015-8406, CVE-2015-8069, CVE-2015-8070,
  CVE-2015-8441, CVE-2015-8442, CVE-2015-8447).

Please also see
        https://helpx.adobe.com/security/products/flash-player/apsb15-32.html
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-SLE-DESKTOP-12-2015-959,SUSE-SLE-DESKTOP-12-SP1-2015-959,SUSE-SLE-WE-12-2015-959,SUSE-SLE-WE-12-SP1-2015-959</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      <Description>Link for SUSE-SU-2015:2247-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2015-12/msg00012.html</URL>
      <Description>E-Mail link for SUSE-SU-2015:2247-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/958324</URL>
      <Description>SUSE Bug 958324</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8045/</URL>
      <Description>SUSE CVE CVE-2015-8045 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8047/</URL>
      <Description>SUSE CVE CVE-2015-8047 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8048/</URL>
      <Description>SUSE CVE CVE-2015-8048 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8049/</URL>
      <Description>SUSE CVE CVE-2015-8049 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8050/</URL>
      <Description>SUSE CVE CVE-2015-8050 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8055/</URL>
      <Description>SUSE CVE CVE-2015-8055 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8056/</URL>
      <Description>SUSE CVE CVE-2015-8056 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8057/</URL>
      <Description>SUSE CVE CVE-2015-8057 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8058/</URL>
      <Description>SUSE CVE CVE-2015-8058 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8059/</URL>
      <Description>SUSE CVE CVE-2015-8059 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8060/</URL>
      <Description>SUSE CVE CVE-2015-8060 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8061/</URL>
      <Description>SUSE CVE CVE-2015-8061 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8062/</URL>
      <Description>SUSE CVE CVE-2015-8062 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8063/</URL>
      <Description>SUSE CVE CVE-2015-8063 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8064/</URL>
      <Description>SUSE CVE CVE-2015-8064 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8065/</URL>
      <Description>SUSE CVE CVE-2015-8065 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8066/</URL>
      <Description>SUSE CVE CVE-2015-8066 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8067/</URL>
      <Description>SUSE CVE CVE-2015-8067 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8068/</URL>
      <Description>SUSE CVE CVE-2015-8068 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8069/</URL>
      <Description>SUSE CVE CVE-2015-8069 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8070/</URL>
      <Description>SUSE CVE CVE-2015-8070 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8071/</URL>
      <Description>SUSE CVE CVE-2015-8071 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8401/</URL>
      <Description>SUSE CVE CVE-2015-8401 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8402/</URL>
      <Description>SUSE CVE CVE-2015-8402 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8403/</URL>
      <Description>SUSE CVE CVE-2015-8403 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8404/</URL>
      <Description>SUSE CVE CVE-2015-8404 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8405/</URL>
      <Description>SUSE CVE CVE-2015-8405 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8406/</URL>
      <Description>SUSE CVE CVE-2015-8406 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8407/</URL>
      <Description>SUSE CVE CVE-2015-8407 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8408/</URL>
      <Description>SUSE CVE CVE-2015-8408 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8409/</URL>
      <Description>SUSE CVE CVE-2015-8409 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8410/</URL>
      <Description>SUSE CVE CVE-2015-8410 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8411/</URL>
      <Description>SUSE CVE CVE-2015-8411 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8412/</URL>
      <Description>SUSE CVE CVE-2015-8412 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8413/</URL>
      <Description>SUSE CVE CVE-2015-8413 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8414/</URL>
      <Description>SUSE CVE CVE-2015-8414 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8415/</URL>
      <Description>SUSE CVE CVE-2015-8415 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8416/</URL>
      <Description>SUSE CVE CVE-2015-8416 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8417/</URL>
      <Description>SUSE CVE CVE-2015-8417 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8418/</URL>
      <Description>SUSE CVE CVE-2015-8418 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8419/</URL>
      <Description>SUSE CVE CVE-2015-8419 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8420/</URL>
      <Description>SUSE CVE CVE-2015-8420 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8421/</URL>
      <Description>SUSE CVE CVE-2015-8421 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8422/</URL>
      <Description>SUSE CVE CVE-2015-8422 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8423/</URL>
      <Description>SUSE CVE CVE-2015-8423 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8424/</URL>
      <Description>SUSE CVE CVE-2015-8424 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8425/</URL>
      <Description>SUSE CVE CVE-2015-8425 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8426/</URL>
      <Description>SUSE CVE CVE-2015-8426 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8427/</URL>
      <Description>SUSE CVE CVE-2015-8427 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8428/</URL>
      <Description>SUSE CVE CVE-2015-8428 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8429/</URL>
      <Description>SUSE CVE CVE-2015-8429 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8430/</URL>
      <Description>SUSE CVE CVE-2015-8430 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8431/</URL>
      <Description>SUSE CVE CVE-2015-8431 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8432/</URL>
      <Description>SUSE CVE CVE-2015-8432 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8433/</URL>
      <Description>SUSE CVE CVE-2015-8433 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8434/</URL>
      <Description>SUSE CVE CVE-2015-8434 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8435/</URL>
      <Description>SUSE CVE CVE-2015-8435 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8436/</URL>
      <Description>SUSE CVE CVE-2015-8436 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8437/</URL>
      <Description>SUSE CVE CVE-2015-8437 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8438/</URL>
      <Description>SUSE CVE CVE-2015-8438 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8439/</URL>
      <Description>SUSE CVE CVE-2015-8439 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8440/</URL>
      <Description>SUSE CVE CVE-2015-8440 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8441/</URL>
      <Description>SUSE CVE CVE-2015-8441 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8442/</URL>
      <Description>SUSE CVE CVE-2015-8442 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8443/</URL>
      <Description>SUSE CVE CVE-2015-8443 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8444/</URL>
      <Description>SUSE CVE CVE-2015-8444 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8445/</URL>
      <Description>SUSE CVE CVE-2015-8445 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8446/</URL>
      <Description>SUSE CVE CVE-2015-8446 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8447/</URL>
      <Description>SUSE CVE CVE-2015-8447 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8448/</URL>
      <Description>SUSE CVE CVE-2015-8448 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8449/</URL>
      <Description>SUSE CVE CVE-2015-8449 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8450/</URL>
      <Description>SUSE CVE CVE-2015-8450 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8451/</URL>
      <Description>SUSE CVE CVE-2015-8451 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8452/</URL>
      <Description>SUSE CVE CVE-2015-8452 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8453/</URL>
      <Description>SUSE CVE CVE-2015-8453 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8454/</URL>
      <Description>SUSE CVE CVE-2015-8454 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2015-8455/</URL>
      <Description>SUSE CVE CVE-2015-8455 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12" CPE="cpe:/o:suse:sled:12">SUSE Linux Enterprise Desktop 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1" CPE="cpe:/o:suse:sled:12:sp1">SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12" CPE="cpe:/o:suse:sle-we:12">SUSE Linux Enterprise Workstation Extension 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1" CPE="cpe:/o:suse:sle-we:12:sp1">SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-11.2.202.554-114.1">
      <FullProductName ProductID="flash-player-11.2.202.554-114.1">flash-player-11.2.202.554-114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-gnome-11.2.202.554-114.1">
      <FullProductName ProductID="flash-player-gnome-11.2.202.554-114.1">flash-player-gnome-11.2.202.554-114.1</FullProductName>
    </Branch>
    <Relationship ProductReference="flash-player-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1">flash-player-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1">flash-player-gnome-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1">flash-player-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1">flash-player-gnome-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1">flash-player-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Workstation Extension 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1">flash-player-gnome-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Workstation Extension 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1">flash-player-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.554-114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1">flash-player-gnome-11.2.202.554-114.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8045</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>6.8</BaseScore>
        <Vector>AV:N/AC:M/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8045.html</URL>
        <Description>CVE-2015-8045</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8047</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8047.html</URL>
        <Description>CVE-2015-8047</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8048</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8048.html</URL>
        <Description>CVE-2015-8048</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted autoSize property value, a different vulnerability than CVE-2015-8048, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8049</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8049.html</URL>
        <Description>CVE-2015-8049</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted beginGradientFill call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8050</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8050.html</URL>
        <Description>CVE-2015-8050</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8055</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8055.html</URL>
        <Description>CVE-2015-8055</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8056</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8056.html</URL>
        <Description>CVE-2015-8056</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8057</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8057.html</URL>
        <Description>CVE-2015-8057</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8058</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8058.html</URL>
        <Description>CVE-2015-8058</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8059</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8059.html</URL>
        <Description>CVE-2015-8059</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8060</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8060.html</URL>
        <Description>CVE-2015-8060</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8061</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8061.html</URL>
        <Description>CVE-2015-8061</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8062</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8062.html</URL>
        <Description>CVE-2015-8062</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8063</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8063.html</URL>
        <Description>CVE-2015-8063</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8064</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8064.html</URL>
        <Description>CVE-2015-8064</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8065</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8065.html</URL>
        <Description>CVE-2015-8065</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8066</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8066.html</URL>
        <Description>CVE-2015-8066</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8067</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8067.html</URL>
        <Description>CVE-2015-8067</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8068</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8068.html</URL>
        <Description>CVE-2015-8068</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8069</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8069.html</URL>
        <Description>CVE-2015-8069</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8070</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8070.html</URL>
        <Description>CVE-2015-8070</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8071</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8071.html</URL>
        <Description>CVE-2015-8071</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8401</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8401.html</URL>
        <Description>CVE-2015-8401</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8402</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8402.html</URL>
        <Description>CVE-2015-8402</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8403</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8403.html</URL>
        <Description>CVE-2015-8403</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8404</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8404.html</URL>
        <Description>CVE-2015-8404</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8405</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8405.html</URL>
        <Description>CVE-2015-8405</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8406</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8406.html</URL>
        <Description>CVE-2015-8406</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8457.</Note>
    </Notes>
    <CVE>CVE-2015-8407</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8407.html</URL>
        <Description>CVE-2015-8407</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8408</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8408.html</URL>
        <Description>CVE-2015-8408</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-8440 and CVE-2015-8453.</Note>
    </Notes>
    <CVE>CVE-2015-8409</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8409.html</URL>
        <Description>CVE-2015-8409</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8410</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8410.html</URL>
        <Description>CVE-2015-8410</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8411</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8411.html</URL>
        <Description>CVE-2015-8411</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8412</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8412.html</URL>
        <Description>CVE-2015-8412</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8413</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8413.html</URL>
        <Description>CVE-2015-8413</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8414</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8414.html</URL>
        <Description>CVE-2015-8414</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2015-8415</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8415.html</URL>
        <Description>CVE-2015-8415</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8416</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8416.html</URL>
        <Description>CVE-2015-8416</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="39">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8417</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8417.html</URL>
        <Description>CVE-2015-8417</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="40">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8418</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8418.html</URL>
        <Description>CVE-2015-8418</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="41">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8419</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8419.html</URL>
        <Description>CVE-2015-8419</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="42">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8420</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8420.html</URL>
        <Description>CVE-2015-8420</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="43">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8421</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8421.html</URL>
        <Description>CVE-2015-8421</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="44">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8422</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8422.html</URL>
        <Description>CVE-2015-8422</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="45">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8423</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8423.html</URL>
        <Description>CVE-2015-8423</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="46">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8424</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8424.html</URL>
        <Description>CVE-2015-8424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="47">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8425</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8425.html</URL>
        <Description>CVE-2015-8425</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="48">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8426</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8426.html</URL>
        <Description>CVE-2015-8426</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="49">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8427</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8427.html</URL>
        <Description>CVE-2015-8427</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="50">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8428</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8428.html</URL>
        <Description>CVE-2015-8428</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="51">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8429</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8429.html</URL>
        <Description>CVE-2015-8429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="52">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8430</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8430.html</URL>
        <Description>CVE-2015-8430</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="53">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8431</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8431.html</URL>
        <Description>CVE-2015-8431</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="54">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8432</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8432.html</URL>
        <Description>CVE-2015-8432</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="55">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8433</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8433.html</URL>
        <Description>CVE-2015-8433</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="56">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8434</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8434.html</URL>
        <Description>CVE-2015-8434</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="57">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8435</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8435.html</URL>
        <Description>CVE-2015-8435</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="58">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted addPage arguments, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8436</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8436.html</URL>
        <Description>CVE-2015-8436</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="59">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the Selection object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted setFocus call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8437</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8437.html</URL>
        <Description>CVE-2015-8437</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="60">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted XML object that is mishandled during a toString call, a different vulnerability than CVE-2015-8446.</Note>
    </Notes>
    <CVE>CVE-2015-8438</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8438.html</URL>
        <Description>CVE-2015-8438</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="61">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code by leveraging an unspecified "type confusion" during a getRemote call, a different vulnerability than CVE-2015-8456.</Note>
    </Notes>
    <CVE>CVE-2015-8439</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8439.html</URL>
        <Description>CVE-2015-8439</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="62">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-8409 and CVE-2015-8453.</Note>
    </Notes>
    <CVE>CVE-2015-8440</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8440.html</URL>
        <Description>CVE-2015-8440</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="63">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8441</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8441.html</URL>
        <Description>CVE-2015-8441</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="64">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted filters property value, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8442</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8442.html</URL>
        <Description>CVE-2015-8442</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="65">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8444, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8443</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8443.html</URL>
        <Description>CVE-2015-8443</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="66">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8451, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8444</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8444.html</URL>
        <Description>CVE-2015-8444</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="67">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a large BitmapData source object.</Note>
    </Notes>
    <CVE>CVE-2015-8445</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8445.html</URL>
        <Description>CVE-2015-8445</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="68">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via an MP3 file with COMM tags that are mishandled during memory allocation, a different vulnerability than CVE-2015-8438.</Note>
    </Notes>
    <CVE>CVE-2015-8446</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8446.html</URL>
        <Description>CVE-2015-8446</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="69">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the Color object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted setTransform arguments, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8447</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8447.html</URL>
        <Description>CVE-2015-8447</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="70">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted mapBitmap property value, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8448</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8448.html</URL>
        <Description>CVE-2015-8448</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="71">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the MovieClip object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted lineTo method call, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8449</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8449.html</URL>
        <Description>CVE-2015-8449</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="72">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted filters property value in a TextField object, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8452, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8450</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8450.html</URL>
        <Description>CVE-2015-8450</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="73">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8455.</Note>
    </Notes>
    <CVE>CVE-2015-8451</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8451.html</URL>
        <Description>CVE-2015-8451</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="74">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, and CVE-2015-8454.</Note>
    </Notes>
    <CVE>CVE-2015-8452</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8452.html</URL>
        <Description>CVE-2015-8452</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="75">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to bypass the ASLR protection mechanism via JIT data, a different vulnerability than CVE-2015-8409 and CVE-2015-8440.</Note>
    </Notes>
    <CVE>CVE-2015-8453</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8453.html</URL>
        <Description>CVE-2015-8453</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="76">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, and CVE-2015-8452.</Note>
    </Notes>
    <CVE>CVE-2015-8454</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8454.html</URL>
        <Description>CVE-2015-8454</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="77">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK &amp; Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, and CVE-2015-8451.</Note>
    </Notes>
    <CVE>CVE-2015-8455</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.554-114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.554-114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2015/suse-su-20152247-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-8455.html</URL>
        <Description>CVE-2015-8455</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/958324</URL>
        <Description>SUSE Bug 958324</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
