Bug 19456 - Multiple sites reported flash our plugin is obsolete
Summary: Multiple sites reported flash our plugin is obsolete
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Anssi Hannula
QA Contact:
URL: https://helpx.adobe.com/security/prod...
Whiteboard: MGA5TOO???
Keywords:
Depends on:
Blocks:
 
Reported: 2016-09-25 21:34 CEST by William Kenney
Modified: 2016-09-27 23:26 CEST (History)
1 user (show)

See Also:
Source RPM: flash-player-plugin
CVE:
Status comment:


Attachments

Description William Kenney 2016-09-25 21:34:05 CEST
Description of problem:

Casual browsing with Firefox in the last couple days report
that the Mageia flash plugin is obsolete and needs to be updated.
http://www.cnn.com/videos being one of them. Some chatter on the net
over a hyper critical ransomware compromise on Flash going around.
Same condition exists in M6.
Marja Van Waes 2016-09-25 21:54:38 CEST

CC: (none) => marja11
Assignee: bugsquad => anssi.hannula

Marja Van Waes 2016-09-25 21:56:28 CEST

Version: 5 => Cauldron
Whiteboard: (none) => MGA5TOO

Comment 1 Marja Van Waes 2016-09-25 22:15:04 CEST
(In reply to William Kenney from comment #0)
> Description of problem:
> 
> Casual browsing with Firefox in the last couple days report
> that the Mageia flash plugin is obsolete and needs to be updated.
> http://www.cnn.com/videos being one of them. Some chatter on the net
> over a hyper critical ransomware compromise on Flash going around.
> Same condition exists in M6.

Mageia 5 should be OK, the last security bulletin about flash that I find is 

https://helpx.adobe.com/security/products/flash-player/apsb16-29.html

(please say so if you find a newer one!)

and Anssi pushed flash-player-plugin-11.2.202.635-1.mga5.nonfree to testing right away. 

It became available as regular update 4 days ago.

However, in cauldron we have old flash-player-plugin-11.2.202.632-1.mga6.nonfree 
:-(

Maybe a freeze-push request never reached dev ml?

URL: (none) => https://helpx.adobe.com/security/products/flash-player/apsb16-29.html
Component: RPM Packages => Security
Whiteboard: MGA5TOO => MGA5TOO???

Comment 2 William Kenney 2016-09-25 22:26:05 CEST
I agree with all your saying. The Linux download from:

https://get.adobe.com/flashplayer/otherversions/

appears to be what I have here. But, lots of sites are complaining.
I also agree this thing's a freak'n mess.
Comment 3 William Kenney 2016-09-25 23:53:51 CEST
Example:

I just visited:

http://www.foxnews.com/

and got one of the pesty little video ads but instead of the video
playing I got the message that my Flash plugin was out of date.
Left button click on the stalled video and your presented with
the option to proceed and/or proceed and remember. Proceed and
remember allows the video to play and if I return to the site
again likely there will be no more Flash error messages.
Comment 4 William Kenney 2016-09-27 06:25:30 CEST
Pretty much every website I now visit that runs Flash throws up a warning that
I am using an outdated version of flash. You can allow the situation and save
that allowance for future visits.
Comment 5 Marja Van Waes 2016-09-27 19:00:35 CEST
It should be ok in cauldron, too, as soon as
flash-player-plugin-11.2.202.635-1.mga6.nonfree hits your mirror

Thanks to Akien who pushed it just now :-)

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 6 William Kenney 2016-09-27 21:19:17 CEST
(In reply to Marja van Waes from comment #5)

> It should be ok in cauldron, too, as soon as
> flash-player-plugin-11.2.202.635-1.mga6.nonfree hits your mirror
> 
> Thanks to Akien who pushed it just now :-)

Kudos to Akien.

So we're good for another 2-weeks ( crossed fingers ).
Comment 7 David Walser 2016-09-27 23:26:25 CEST
Note that you have to be careful also when getting this issue, exactly what the issue is.  Some websites themselves may give an error in the page itself that your Flash version is too old, because their Flash applet requires something newer than 11.2.  In this case, the warning was coming from Firefox (dropping down underneath the bars at the top), and that's controlled by Mozilla.  Sometimes they forget to update the newest version string for the Linux one and we get that warning even though we're up to date, and we just have to wait for Mozilla to fix it on their end.

Note You need to log in before you can comment on or make changes to this bug.