<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for flash-player</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2016:1305-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2016-05-16T12:14:28Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2016-05-16T12:14:28Z</InitialReleaseDate>
    <CurrentReleaseDate>2016-05-16T12:14:28Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for flash-player</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
This update for flash-player fixes the following issues: 

- Security update to 11.2.202.621 (bsc#979422):
  * APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097,
    CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101,
    CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105,
    CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109,
    CVE-2016-1110, CVE-2016-4108, CVE-2016-4109, CVE-2016-4110,
    CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114,
    CVE-2016-4115, CVE-2016-4116, CVE-2016-4117

- The following CVEs got fixed during the previous release, but
  got published afterwards:
  * APSA16-01, APSB16-10, CVE-2016-1006, CVE-2016-1011,
    CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015,
    CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, CVE-2016-1019,
    CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023,
    CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027,
    CVE-2016-1028, CVE-2016-1029, CVE-2016-1030, CVE-2016-1031,
    CVE-2016-1032, CVE-2016-1033</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-SLE-DESKTOP-12-2016-772,SUSE-SLE-DESKTOP-12-SP1-2016-772,SUSE-SLE-WE-12-2016-772,SUSE-SLE-WE-12-SP1-2016-772</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      <Description>Link for SUSE-SU-2016:1305-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.opensuse.org/opensuse-security-announce/2016-05/msg00044.html</URL>
      <Description>E-Mail link for SUSE-SU-2016:1305-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/979422</URL>
      <Description>SUSE Bug 979422</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1006/</URL>
      <Description>SUSE CVE CVE-2016-1006 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1011/</URL>
      <Description>SUSE CVE CVE-2016-1011 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1012/</URL>
      <Description>SUSE CVE CVE-2016-1012 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1013/</URL>
      <Description>SUSE CVE CVE-2016-1013 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1014/</URL>
      <Description>SUSE CVE CVE-2016-1014 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1015/</URL>
      <Description>SUSE CVE CVE-2016-1015 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1016/</URL>
      <Description>SUSE CVE CVE-2016-1016 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1017/</URL>
      <Description>SUSE CVE CVE-2016-1017 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1018/</URL>
      <Description>SUSE CVE CVE-2016-1018 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1019/</URL>
      <Description>SUSE CVE CVE-2016-1019 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1020/</URL>
      <Description>SUSE CVE CVE-2016-1020 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1021/</URL>
      <Description>SUSE CVE CVE-2016-1021 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1022/</URL>
      <Description>SUSE CVE CVE-2016-1022 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1023/</URL>
      <Description>SUSE CVE CVE-2016-1023 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1024/</URL>
      <Description>SUSE CVE CVE-2016-1024 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1025/</URL>
      <Description>SUSE CVE CVE-2016-1025 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1026/</URL>
      <Description>SUSE CVE CVE-2016-1026 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1027/</URL>
      <Description>SUSE CVE CVE-2016-1027 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1028/</URL>
      <Description>SUSE CVE CVE-2016-1028 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1029/</URL>
      <Description>SUSE CVE CVE-2016-1029 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1030/</URL>
      <Description>SUSE CVE CVE-2016-1030 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1031/</URL>
      <Description>SUSE CVE CVE-2016-1031 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1032/</URL>
      <Description>SUSE CVE CVE-2016-1032 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1033/</URL>
      <Description>SUSE CVE CVE-2016-1033 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1096/</URL>
      <Description>SUSE CVE CVE-2016-1096 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1097/</URL>
      <Description>SUSE CVE CVE-2016-1097 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1098/</URL>
      <Description>SUSE CVE CVE-2016-1098 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1099/</URL>
      <Description>SUSE CVE CVE-2016-1099 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1100/</URL>
      <Description>SUSE CVE CVE-2016-1100 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1101/</URL>
      <Description>SUSE CVE CVE-2016-1101 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1102/</URL>
      <Description>SUSE CVE CVE-2016-1102 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1103/</URL>
      <Description>SUSE CVE CVE-2016-1103 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1104/</URL>
      <Description>SUSE CVE CVE-2016-1104 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1105/</URL>
      <Description>SUSE CVE CVE-2016-1105 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1106/</URL>
      <Description>SUSE CVE CVE-2016-1106 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1107/</URL>
      <Description>SUSE CVE CVE-2016-1107 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1108/</URL>
      <Description>SUSE CVE CVE-2016-1108 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1109/</URL>
      <Description>SUSE CVE CVE-2016-1109 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-1110/</URL>
      <Description>SUSE CVE CVE-2016-1110 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4108/</URL>
      <Description>SUSE CVE CVE-2016-4108 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4109/</URL>
      <Description>SUSE CVE CVE-2016-4109 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4110/</URL>
      <Description>SUSE CVE CVE-2016-4110 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4111/</URL>
      <Description>SUSE CVE CVE-2016-4111 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4112/</URL>
      <Description>SUSE CVE CVE-2016-4112 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4113/</URL>
      <Description>SUSE CVE CVE-2016-4113 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4114/</URL>
      <Description>SUSE CVE CVE-2016-4114 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4115/</URL>
      <Description>SUSE CVE CVE-2016-4115 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4116/</URL>
      <Description>SUSE CVE CVE-2016-4116 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2016-4117/</URL>
      <Description>SUSE CVE CVE-2016-4117 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12" CPE="cpe:/o:suse:sled:12">SUSE Linux Enterprise Desktop 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Desktop 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Desktop 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1" CPE="cpe:/o:suse:sled:12:sp1">SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12" CPE="cpe:/o:suse:sle-we:12">SUSE Linux Enterprise Workstation Extension 12</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Workstation Extension 12 SP1">
        <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1" CPE="cpe:/o:suse:sle-we:12:sp1">SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-11.2.202.621-130.1">
      <FullProductName ProductID="flash-player-11.2.202.621-130.1">flash-player-11.2.202.621-130.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-gnome-11.2.202.621-130.1">
      <FullProductName ProductID="flash-player-gnome-11.2.202.621-130.1">flash-player-gnome-11.2.202.621-130.1</FullProductName>
    </Branch>
    <Relationship ProductReference="flash-player-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1">flash-player-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1">flash-player-gnome-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Desktop 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1">flash-player-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Desktop 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1">flash-player-gnome-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Desktop 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1">flash-player-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Workstation Extension 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1">flash-player-gnome-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Workstation Extension 12</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1">flash-player-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.621-130.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Workstation Extension 12 SP1">
      <FullProductName ProductID="SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1">flash-player-gnome-11.2.202.621-130.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP1</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data.</Note>
    </Notes>
    <CVE>CVE-2016-1006</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1006.html</URL>
        <Description>CVE-2016-1006</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1013, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.</Note>
    </Notes>
    <CVE>CVE-2016-1011</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1011.html</URL>
        <Description>CVE-2016-1011</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1012</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1012.html</URL>
        <Description>CVE-2016-1012</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1016, CVE-2016-1017, and CVE-2016-1031.</Note>
    </Notes>
    <CVE>CVE-2016-1013</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1013.html</URL>
        <Description>CVE-2016-1013</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in an unspecified directory.</Note>
    </Notes>
    <CVE>CVE-2016-1014</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1014.html</URL>
        <Description>CVE-2016-1014</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020381</URL>
        <Description>SUSE Bug 1020381</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1020429</URL>
        <Description>SUSE Bug 1020429</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than CVE-2016-1019.</Note>
    </Notes>
    <CVE>CVE-2016-1015</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1015.html</URL>
        <Description>CVE-2016-1015</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1021129</URL>
        <Description>SUSE Bug 1021129</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1024183</URL>
        <Description>SUSE Bug 1024183</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via a flash.geom.Matrix callback, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1017, and CVE-2016-1031.</Note>
    </Notes>
    <CVE>CVE-2016-1016</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1016.html</URL>
        <Description>CVE-2016-1016</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1021364</URL>
        <Description>SUSE Bug 1021364</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1021616</URL>
        <Description>SUSE Bug 1021616</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in the LoadVars.decode function in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1031.</Note>
    </Notes>
    <CVE>CVE-2016-1017</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1017.html</URL>
        <Description>CVE-2016-1017</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1021740</URL>
        <Description>SUSE Bug 1021740</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Stack-based buffer overflow in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via crafted JPEG-XR data.</Note>
    </Notes>
    <CVE>CVE-2016-1018</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1018.html</URL>
        <Description>CVE-2016-1018</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exploited in the wild in April 2016.</Note>
    </Notes>
    <CVE>CVE-2016-1019</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>9</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:C/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1019.html</URL>
        <Description>CVE-2016-1019</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1020</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1020.html</URL>
        <Description>CVE-2016-1020</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1023377</URL>
        <Description>SUSE Bug 1023377</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1021</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1021.html</URL>
        <Description>CVE-2016-1021</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1024244</URL>
        <Description>SUSE Bug 1024244</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1022</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1022.html</URL>
        <Description>CVE-2016-1022</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1023</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1023.html</URL>
        <Description>CVE-2016-1023</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1024</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1024.html</URL>
        <Description>CVE-2016-1024</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029704</URL>
        <Description>SUSE Bug 1029704</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1029705</URL>
        <Description>SUSE Bug 1029705</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1025</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1025.html</URL>
        <Description>CVE-2016-1025</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1006836</URL>
        <Description>SUSE Bug 1006836</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1026</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1026.html</URL>
        <Description>CVE-2016-1026</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1027</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1027.html</URL>
        <Description>CVE-2016-1027</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1028</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1028.html</URL>
        <Description>CVE-2016-1028</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1032, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1029</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1029.html</URL>
        <Description>CVE-2016-1029</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass intended access restrictions via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2016-1030</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1030.html</URL>
        <Description>CVE-2016-1030</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1011, CVE-2016-1013, CVE-2016-1016, and CVE-2016-1017.</Note>
    </Notes>
    <CVE>CVE-2016-1031</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1031.html</URL>
        <Description>CVE-2016-1031</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1033.</Note>
    </Notes>
    <CVE>CVE-2016-1032</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1032.html</URL>
        <Description>CVE-2016-1032</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1020, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, and CVE-2016-1032.</Note>
    </Notes>
    <CVE>CVE-2016-1033</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1033.html</URL>
        <Description>CVE-2016-1033</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/974209</URL>
        <Description>SUSE Bug 974209</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1096</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1096.html</URL>
        <Description>CVE-2016-1096</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1097</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1097.html</URL>
        <Description>CVE-2016-1097</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1098</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1098.html</URL>
        <Description>CVE-2016-1098</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1099</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1099.html</URL>
        <Description>CVE-2016-1099</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1100</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1100.html</URL>
        <Description>CVE-2016-1100</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1101</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1101.html</URL>
        <Description>CVE-2016-1101</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1102</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1102.html</URL>
        <Description>CVE-2016-1102</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1103</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1103.html</URL>
        <Description>CVE-2016-1103</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1104</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1104.html</URL>
        <Description>CVE-2016-1104</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1105</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1105.html</URL>
        <Description>CVE-2016-1105</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1106</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1106.html</URL>
        <Description>CVE-2016-1106</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1107</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1107.html</URL>
        <Description>CVE-2016-1107</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1108</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1108.html</URL>
        <Description>CVE-2016-1108</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1109</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1109.html</URL>
        <Description>CVE-2016-1109</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="39">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-1110</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-1110.html</URL>
        <Description>CVE-2016-1110</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="40">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4108</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4108.html</URL>
        <Description>CVE-2016-4108</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="41">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4109</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4109.html</URL>
        <Description>CVE-2016-4109</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="42">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4110</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4110.html</URL>
        <Description>CVE-2016-4110</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="43">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4111</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4111.html</URL>
        <Description>CVE-2016-4111</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="44">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4112</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4112.html</URL>
        <Description>CVE-2016-4112</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="45">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4113</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4113.html</URL>
        <Description>CVE-2016-4113</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="46">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4114</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4114.html</URL>
        <Description>CVE-2016-4114</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="47">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4115</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4115.html</URL>
        <Description>CVE-2016-4115</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="48">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.</Note>
    </Notes>
    <CVE>CVE-2016-4116</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4116.html</URL>
        <Description>CVE-2016-4116</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="49">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.</Note>
    </Notes>
    <CVE>CVE-2016-4117</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.621-130.1</ProductID>
        <ProductID>SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.621-130.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSet>
        <BaseScore>7.5</BaseScore>
        <Vector>AV:N/AC:L/Au:N/C:P/I:P/A:P</Vector>
      </ScoreSet>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2016/suse-su-20161305-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2016-4117.html</URL>
        <Description>CVE-2016-4117</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/979422</URL>
        <Description>SUSE Bug 979422</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/984695</URL>
        <Description>SUSE Bug 984695</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
