Bug 8660

Summary: new adobe flash player plugin 11.2.202.261
Product: Mageia Reporter: Simon Putt <lemonzest>
Component: SecurityAssignee: QA Team <qa-bugs>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: anssi.hannula, philippedidier, sysadmin-bugs, tmb
Version: 2Keywords: Security, validated_update
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: MGA2-32-OK mga2-64-OK
Source RPM: flash-player-plugin CVE:
Status comment:

Description Simon Putt 2013-01-11 08:54:54 CET
this came out the other day.

needs updating.
Comment 1 Manuel Hiebel 2013-01-11 22:39:16 CET
thanks, and btw you can use security (as it's the case I guess)

Component: RPM Packages => Security
Assignee: bugsquad => anssi.hannula
Source RPM: (none) => flash-player-plugin
Whiteboard: (none) => MGA2TOO

Comment 2 Anssi Hannula 2013-01-13 01:30:06 CET
Flash Player 11.2.202.261 has been pushed to cauldron nonfree/release and to mga2 nonfree/updates_testing.

Advisory:
============
Adobe Flash Player 11.2.202.261 contains a fix to a critical security
vulnerability found in earlier versions. This vulnerability could cause a
crash and potentially allow an attacker to take control of the affected system.

This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2013-0630).

References:
http://www.adobe.com/support/security/bulletins/apsb13-01.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0630
============

Updated Flash Player 11.2.202.261 packages are in mga2
nonfree/updates_testing as flash-player-plugin (i586 and x86_64) and
flash-player-plugin-kde (i586 and x86_64).

==========
Suggested testing procedure:
==========
Package installs and Flash works.

Keywords: (none) => Security
CC: (none) => anssi.hannula
Hardware: i586 => All
Assignee: anssi.hannula => qa-bugs

Comment 3 Philippe Didier 2013-01-13 02:30:36 CET
updated and OK on MGA 32bits

CC: (none) => philippedidier
Whiteboard: MGA2TOO => MGA2TOO MGA2-586 OK

Philippe Didier 2013-01-13 02:32:36 CET

Whiteboard: MGA2TOO MGA2-586 OK => MGA2TOO MGA2-32 OK

claire robinson 2013-01-13 10:48:27 CET

Whiteboard: MGA2TOO MGA2-32 OK => MGA2TOO MGA2-32-OK

claire robinson 2013-01-13 10:48:39 CET

Version: Cauldron => 2
Whiteboard: MGA2TOO MGA2-32-OK => MGA2-32-OK

Comment 4 claire robinson 2013-01-13 10:54:16 CET
Testing complete mga2 64

Validating


Advisory & srpm in comment 2

Could sysadmin please push from nonfree/updates_testing to nonfree/updates

Thanks!

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: MGA2-32-OK => MGA2-32-OK mga2-64-OK

Comment 5 Thomas Backlund 2013-01-14 22:31:46 CET
Update pushed:
https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0007

Status: NEW => RESOLVED
CC: (none) => tmb
Resolution: (none) => FIXED