Testing complete mga4 64

tested flash still working and cleared local flash storage in kde settings.

Whiteboard: MGA3TOO => MGA3TOO has_procedure mga4-64-ok

Tested fine on Mageia 3 i586 as well.

Whiteboard: MGA3TOO has_procedure mga4-64-ok => MGA3TOO has_procedure mga4-64-ok mga4-32-ok

Advisory uploaded.

Whiteboard: MGA3TOO has_procedure mga4-64-ok mga4-32-ok => MGA3TOO has_procedure mga4-64-ok mga4-32-ok advisory

@David: you said having tested on Mageia 3 i586 but added the mga4-32-ok label, could you clarify?

CC: (none) => remi

Hehe, oops.  Tested Mageia 4.  Will test Mageia 3 tomorrow if nobody does first.

Just realized that the previous Flash update (bug #14456) hasn't been pushed by sysadmins yet (it was validated, though), and this new version of course superseded it in the updates_testing repository...

Can the sysadmins still push the previous one (I think there is an rpm backup somewhere on the server), or should the advisory for this one be adjusted to include the stuff from #14456 as well?

Ahh, yes.  The stuff from the previous update should be added to the advisory.

Updated suggested advisory (if bug #14456 does not get pushed):
============
Adobe Flash Player 11.2.202.418 contains fixes to critical security 
vulnerabilities found in earlier versions that could potentially allow an 
attacker to take control of the affected system.

This update resolves memory corruption vulnerabilities that could lead to code execution (CVE-2014-0558, CVE-2014-0564, CVE-2014-0576, CVE-2014-0581, CVE-2014-8440, CVE-2014-8441).

This update resolves an integer overflow vulnerability that could lead to code execution (CVE-2014-0569).

This update resolves use-after-free vulnerabilities that could lead to code execution (CVE-2014-0573, CVE-2014-0588, CVE-2014-8438).

This update resolves a double free vulnerability that could lead to code execution (CVE-2014-0574).

This update resolves type confusion vulnerabilities that could lead to code execution (CVE-2014-0577, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0590).

This update resolves heap buffer overflow vulnerabilities that could lead to code execution (CVE-2014-0582, CVE-2014-0589).

This update resolves an information disclosure vulnerability that could be exploited to disclose session tokens (CVE-2014-8437).

This update resolves a heap buffer overflow vulnerability that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-0583). 

This update resolves a permission issue that could be exploited to perform privilege escalation from low to medium integrity level (CVE-2014-8442).

References:
http://helpx.adobe.com/security/products/flash-player/apsb14-22.html
http://helpx.adobe.com/security/products/flash-player/apsb14-24.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0564
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0569
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0573
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0574
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0576
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0577
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0581
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0582
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0583
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0584
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0585
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0586
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0588
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0589
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8437
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8438
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8440
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8441
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8442
============

Testing complete mga3 32

Whiteboard: MGA3TOO has_procedure mga4-64-ok mga4-32-ok advisory => MGA3TOO has_procedure mga3-32-ok mga4-64-ok mga4-32-ok advisory
Severity: normal => critical

Advisory updated to comment 8

Validating. 

Could sysadmin please push to 3 & 4 updates

Thanks

Whiteboard: MGA3TOO has_procedure mga3-32-ok mga4-64-ok mga4-32-ok advisory => MGA3TOO has_procedure advisory mga3-32-ok mga3-64-ok mga4-64-ok mga4-32-ok
CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGASA-2014-0448.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED