Bug 23565

Summary:	flash-player-plugin security update 31.0.0.108
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	marja11, mhrambo3501, nicolas.salguero, quaiest, smelror, sysadmin-bugs, tmb
Version:	6	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	mga6-64-ok
Source RPM:	flash-player-plugin	CVE:	CVE-2018-15967
Status comment:

Description Nicolas Salguero 2018-09-12 14:45:26 CEST

Hi,

Version 31.0.0.108 fixes CVE-2018-15967.

References:
https://helpx.adobe.com/security/products/flash-player/apsb18-31.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15967

Best regards,

Nico.

Nicolas Salguero 2018-09-12 14:46:13 CEST

Whiteboard: (none) => MGA6TOO
CVE: (none) => CVE-2018-15967
Source RPM: (none) => flash-player-plugin

Comment 1 Thomas Backlund 2018-09-12 17:52:32 CEST

*** Bug 23566 has been marked as a duplicate of this bug. ***

CC: (none) => quaiest

Comment 2 Marja Van Waes 2018-09-12 20:05:58 CEST

Assigning to all packagers collectively, since there is no registered maintainer for this package.

CC'ing some committers.

Assignee: bugsquad => pkg-bugs
CC: (none) => marja11, mrambo, nicolas.salguero, smelror

Comment 3 Thomas Backlund 2018-09-12 20:57:58 CEST

(S)RPM to test:

flash-player-plugin-31.0.0.108-1.mga6.nonfree

Whiteboard: MGA6TOO => (none)
Assignee: pkg-bugs => qa-bugs
CC: (none) => tmb
Version: Cauldron => 6

Comment 4 claire robinson 2018-09-13 18:35:23 CEST

Testing complete mga6 64, validating.

Confirmed correct version downloaded

# urpmi flash-player-plugin


    $MIRRORLIST: media/nonfree/updates_testing/flash-player-plugin-31.0.0.108-1.mga6.nonfree.x86_64.rpm
installing flash-player-plugin-31.0.0.108-1.mga6.nonfree.x86_64.rpm from /var/cache/urpmi/rpms                                                                        
Preparing...                     ###########################################
Note that by downloading the Adobe Flash Player you indicate your acceptance of
the EULA, available at http://www.adobe.com/products/eulas/players/flash/
Downloading from http://fpdownload.adobe.com/get/flashplayer/pdc/31.0.0.108/flash-player-ppapi-31.0.0.108-release.x86_64.rpm:
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 9228k  100 9228k    0     0  3089k      0  0:00:02  0:00:02 --:--:-- 3276k
      1/1: flash-player-plugin   #################################################
Adobe Flash Player installation successful.
      1/1: removing flash-player-plugin-30.0.0.154-1.mga6.nonfree.x86_64
                                 ###########################################


Usual tests..
https://get.adobe.com/flashplayer/about/

You have version 31,0,0,108 installed


Played flash games.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: (none) => mga6-64-ok

Thomas Backlund 2018-09-13 22:13:53 CEST

Keywords: (none) => advisory

Comment 5 Mageia Robot 2018-09-13 22:39:03 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0372.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED