<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1" xmlns:cvrf="http://www.icasi.org/CVRF/schema/cvrf/1.1">
  <DocumentTitle xml:lang="en">Security update for flash-player</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>openSUSE-SU-2015:1391-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2015-08-12T11:55:05Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2015-08-12T11:55:05Z</InitialReleaseDate>
    <CurrentReleaseDate>2015-08-12T11:55:05Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for flash-player</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
- Security update to 11.2.202.508 (bsc#941239):
  * APSB15-19: CVE-2015-3107, CVE-2015-5124, CVE-2015-5125,
    CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130,
    CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134,
    CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544,
    CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548,
    CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552,
    CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556,
    CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560,
    CVE-2015-5561, CVE-2015-5562, CVE-2015-5563
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      <Description>E-Mail link for openSUSE-SU-2015:1391-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1">
    <Branch Type="Product Family" Name="openSUSE 13.2 NonFree">
      <Branch Type="Product Name" Name="openSUSE 13.2 NonFree">
        <FullProductName ProductID="openSUSE 13.2 NonFree">openSUSE 13.2 NonFree</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-11.2.202.508-2.67.1">
      <FullProductName ProductID="flash-player-11.2.202.508-2.67.1">flash-player-11.2.202.508-2.67.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-gnome-11.2.202.508-2.67.1">
      <FullProductName ProductID="flash-player-gnome-11.2.202.508-2.67.1">flash-player-gnome-11.2.202.508-2.67.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="flash-player-kde4-11.2.202.508-2.67.1">
      <FullProductName ProductID="flash-player-kde4-11.2.202.508-2.67.1">flash-player-kde4-11.2.202.508-2.67.1</FullProductName>
    </Branch>
    <Relationship ProductReference="flash-player-11.2.202.508-2.67.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2 NonFree">
      <FullProductName ProductID="openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1">flash-player-11.2.202.508-2.67.1 as a component of openSUSE 13.2 NonFree</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-gnome-11.2.202.508-2.67.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2 NonFree">
      <FullProductName ProductID="openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1">flash-player-gnome-11.2.202.508-2.67.1 as a component of openSUSE 13.2 NonFree</FullProductName>
    </Relationship>
    <Relationship ProductReference="flash-player-kde4-11.2.202.508-2.67.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE 13.2 NonFree">
      <FullProductName ProductID="openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1">flash-player-kde4-11.2.202.508-2.67.1 as a component of openSUSE 13.2 NonFree</FullProductName>
    </Relationship>
  </ProductTree>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR before 18.0.0.144 on Windows and before 18.0.0.143 on OS X and Android, Adobe AIR SDK before 18.0.0.144 on Windows and before 18.0.0.143 on OS X, and Adobe AIR SDK &amp; Compiler before 18.0.0.144 on Windows and before 18.0.0.143 on OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-3103 and CVE-2015-3106.</Note>
    </Notes>
    <CVE>CVE-2015-3107</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-3107.html</URL>
        <Description>CVE-2015-3107</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/934088</URL>
        <Description>SUSE Bug 934088</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK &amp; Compiler before 18.0.0.180 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-3117, CVE-2015-3123, CVE-2015-3130, CVE-2015-3133, CVE-2015-3134, and CVE-2015-4431.</Note>
    </Notes>
    <CVE>CVE-2015-5124</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5124.html</URL>
        <Description>CVE-2015-5124</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to cause a denial of service (vector-length corruption) or possibly have unspecified other impact via unknown vectors.</Note>
    </Notes>
    <CVE>CVE-2015-5125</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5125.html</URL>
        <Description>CVE-2015-5125</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5127</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5127.html</URL>
        <Description>CVE-2015-5127</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT **  DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none.</Note>
    </Notes>
    <CVE>CVE-2015-5128</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5128.html</URL>
        <Description>CVE-2015-5128</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5541.</Note>
    </Notes>
    <CVE>CVE-2015-5129</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5129.html</URL>
        <Description>CVE-2015-5129</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5130</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5130.html</URL>
        <Description>CVE-2015-5130</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/952254</URL>
        <Description>SUSE Bug 952254</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5132 and CVE-2015-5133.</Note>
    </Notes>
    <CVE>CVE-2015-5131</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5131.html</URL>
        <Description>CVE-2015-5131</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5133.</Note>
    </Notes>
    <CVE>CVE-2015-5132</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5132.html</URL>
        <Description>CVE-2015-5132</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5131 and CVE-2015-5132.</Note>
    </Notes>
    <CVE>CVE-2015-5133</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5133.html</URL>
        <Description>CVE-2015-5133</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5134</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5134.html</URL>
        <Description>CVE-2015-5134</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5539</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5539.html</URL>
        <Description>CVE-2015-5539</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5540</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5540.html</URL>
        <Description>CVE-2015-5540</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5129.</Note>
    </Notes>
    <CVE>CVE-2015-5541</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5541.html</URL>
        <Description>CVE-2015-5541</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5544</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5544.html</URL>
        <Description>CVE-2015-5544</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5545</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5545.html</URL>
        <Description>CVE-2015-5545</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5546</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5546.html</URL>
        <Description>CVE-2015-5546</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5548, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5547</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5547.html</URL>
        <Description>CVE-2015-5547</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5549, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5548</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5548.html</URL>
        <Description>CVE-2015-5548</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5552, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5549</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5549.html</URL>
        <Description>CVE-2015-5549</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5550</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5550.html</URL>
        <Description>CVE-2015-5550</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5551</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5551.html</URL>
        <Description>CVE-2015-5551</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5553.</Note>
    </Notes>
    <CVE>CVE-2015-5552</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5552.html</URL>
        <Description>CVE-2015-5552</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, and CVE-2015-5552.</Note>
    </Notes>
    <CVE>CVE-2015-5553</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5553.html</URL>
        <Description>CVE-2015-5553</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5555, CVE-2015-5558, and CVE-2015-5562.</Note>
    </Notes>
    <CVE>CVE-2015-5554</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5554.html</URL>
        <Description>CVE-2015-5554</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5558, and CVE-2015-5562.</Note>
    </Notes>
    <CVE>CVE-2015-5555</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5555.html</URL>
        <Description>CVE-2015-5555</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5556</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5556.html</URL>
        <Description>CVE-2015-5556</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5559, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5557</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5557.html</URL>
        <Description>CVE-2015-5557</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5562.</Note>
    </Notes>
    <CVE>CVE-2015-5558</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5558.html</URL>
        <Description>CVE-2015-5558</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5561, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5559</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5559.html</URL>
        <Description>CVE-2015-5559</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors.</Note>
    </Notes>
    <CVE>CVE-2015-5560</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5560.html</URL>
        <Description>CVE-2015-5560</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5563, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5561</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5561.html</URL>
        <Description>CVE-2015-5561</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allow attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-2015-5554, CVE-2015-5555, and CVE-2015-5558.</Note>
    </Notes>
    <CVE>CVE-2015-5562</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5562.html</URL>
        <Description>CVE-2015-5562</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
  <Vulnerability xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK &amp; Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5127, CVE-2015-5130, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5550, CVE-2015-5551, CVE-2015-5556, CVE-2015-5557, CVE-2015-5559, CVE-2015-5561, CVE-2015-5564, and CVE-2015-5565.</Note>
    </Notes>
    <CVE>CVE-2015-5563</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>openSUSE 13.2 NonFree:flash-player-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-gnome-11.2.202.508-2.67.1</ProductID>
        <ProductID>openSUSE 13.2 NonFree:flash-player-kde4-11.2.202.508-2.67.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>critical</Description>
      </Threat>
    </Threats>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">Please Install the update.</Description>
        <URL>http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00016.html</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2015-5563.html</URL>
        <Description>CVE-2015-5563</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/941239</URL>
        <Description>SUSE Bug 941239</Description>
      </Reference>
    </References>
  </Vulnerability>
</cvrfdoc>
