Bug 21936 - Update request: FlashPlayer 27.0.0.183
Summary: Update request: FlashPlayer 27.0.0.183
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: All Linux
Priority: High normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA5TOO MGA5-32-OK MGA6-64-OK MGA5-64...
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2017-10-26 13:22 CEST by Stig-Ørjan Smelror
Modified: 2017-11-10 20:33 CET (History)
10 users (show)

See Also:
Source RPM: flash-player-plugin-27.0.0.170-1
CVE:
Status comment:


Attachments

Description Stig-Ørjan Smelror 2017-10-26 13:22:31 CEST
Adobe has released an update to version 27.0.0.183.

Since this is FlashPlayer, I guess it's very important to keep updated.


Cheers,
Stig
Stig-Ørjan Smelror 2017-10-26 13:24:15 CEST

Whiteboard: (none) => MGA6TOO, MGA5TOO

Stig-Ørjan Smelror 2017-10-26 13:24:42 CEST

Priority: Normal => High

Comment 1 Rémi Verschelde 2017-10-26 13:35:56 CEST
Assuming of security relevance until we know better what's in it, I don't see a security advisory yet though: https://helpx.adobe.com/security.html

QA Contact: (none) => security
Assignee: bugsquad => anssi.hannula
Component: RPM Packages => Security

Comment 2 Stig-Ørjan Smelror 2017-10-26 13:49:44 CEST
OK. Thanks for the correction.

I got a little carried away and I'm sorry.

Still have a lot to learn.

Cheers,
Stig
Comment 3 Rémi Verschelde 2017-10-26 13:58:34 CEST
No problem, there was no rebuke in my comment. We just need to check what this update is about.
Comment 4 Christian C 2017-10-28 12:25:49 CEST
Yes but the problem is that the current version (170-1) is not available on the repository, so I can't look at flash videos with web browsers :

# urpmi flash-player-plugin


    ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/x86_64/media/nonfree/updates/flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64.rpm
installation de flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64.rpm depuis /var/cache/urpmi/rpms                                            
Préparation...                   ###############################################################################################################
Note that by downloading the Adobe Flash Player you indicate your acceptance of
the EULA, available at http://www.adobe.com/products/eulas/players/flash/
Downloading from http://fpdownload.adobe.com/get/flashplayer/pdc/27.0.0.170/flash-player-ppapi-27.0.0.170-release.x86_64.rpm:
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   277  100   277    0     0   1239      0 --:--:-- --:--:-- --:--:--  1481
Downloading from http://linuxdownload.adobe.com/linux/x86_64/flash-player-ppapi-27.0.0.170-release.x86_64.rpm:
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   259  100   259    0     0   1956      0 --:--:-- --:--:-- --:--:--  2616
Error: Unable to download Flash Player. This is likely due to this package
       being too old. Please file a bug report at https://bugs.mageia.org
       so that the package gets updated. Thank you.

       In the meantime, you can download Flash Player manually from
       http://get.adobe.com/flashplayer/
erreur : %prein(flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64) scriptlet échoué, état de sortie 1
ERROR: 'script' failed for flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64
erreur : flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64: installer échoué

CC: (none) => bugzzzz

Dimitrios Glentadakis 2017-10-31 14:01:26 CET

CC: (none) => dglent

Giuseppe Merigo 2017-11-03 12:10:25 CET

CC: (none) => g.merigo

Sntnl Z75 2017-11-05 15:37:56 CET

CC: (none) => sntnlz75

Comment 5 Stig-Ørjan Smelror 2017-11-06 14:54:52 CET
(In reply to Christian CHEVALIER from comment #4)
> Yes but the problem is that the current version (170-1) is not available on
> the repository, so I can't look at flash videos with web browsers :
> 
> # urpmi flash-player-plugin
> 
> 
>    
> ftp://ftp.free.fr/mirrors/mageia.org/distrib/6/x86_64/media/nonfree/updates/
> flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64.rpm
> installation de flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64.rpm
> depuis /var/cache/urpmi/rpms                                            
> Préparation...                  
> #############################################################################
> ##################################
> Note that by downloading the Adobe Flash Player you indicate your acceptance
> of
> the EULA, available at http://www.adobe.com/products/eulas/players/flash/
> Downloading from
> http://fpdownload.adobe.com/get/flashplayer/pdc/27.0.0.170/flash-player-
> ppapi-27.0.0.170-release.x86_64.rpm:
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time 
> Current
>                                  Dload  Upload   Total   Spent    Left  Speed
> 100   277  100   277    0     0   1239      0 --:--:-- --:--:-- --:--:-- 
> 1481
> Downloading from
> http://linuxdownload.adobe.com/linux/x86_64/flash-player-ppapi-27.0.0.170-
> release.x86_64.rpm:
>   % Total    % Received % Xferd  Average Speed   Time    Time     Time 
> Current
>                                  Dload  Upload   Total   Spent    Left  Speed
> 100   259  100   259    0     0   1956      0 --:--:-- --:--:-- --:--:-- 
> 2616
> Error: Unable to download Flash Player. This is likely due to this package
>        being too old. Please file a bug report at https://bugs.mageia.org
>        so that the package gets updated. Thank you.
> 
>        In the meantime, you can download Flash Player manually from
>        http://get.adobe.com/flashplayer/
> erreur : %prein(flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64)
> scriptlet échoué, état de sortie 1
> ERROR: 'script' failed for
> flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64
> erreur : flash-player-plugin-27.0.0.170-1.mga6.nonfree.x86_64: installer
> échoué


The reason for this is that the sha256sum is incorrect in the spec-file.

Cheers,
Stig
Comment 6 Mike Rambo 2017-11-06 15:29:55 CET
This is a bugfix release.

https://forums.adobe.com/thread/2402259

As the old .170 version is no longer available I guess we should update.


Updated package uploaded for cauldron, Mageia 6, and Mageia 5.

Advisory: 
======================== 

Updated flash-player-plugin package fixes bugs:

This release updates Flash Player with an important functional fix impacting
Flex content.

Updated packages in core/updates_testing:
========================
flash-player-plugin-27.0.0.183-1.mga5
flash-player-plugin-kde-27.0.0.183-1.mga5

from: flash-player-plugin-27.0.0.183-1.mga5.src.rpm

flash-player-plugin-27.0.0.183-1.mga6

from: flash-player-plugin-27.0.0.183-1.mga6.src.rpm

Assignee: anssi.hannula => qa-bugs
Component: Security => RPM Packages
CC: (none) => mrambo
Version: Cauldron => 6
Whiteboard: MGA6TOO, MGA5TOO => MGA5TOO
QA Contact: security => (none)

Comment 7 Herman Viaene 2017-11-07 12:12:00 CET
MGA-32 on Asus A6000VM Xfce
No installation issues
Installed flash-player-plugin-27.0.0.183-1.mga5. Played movie from newspaper, listen to internet radio, all OK.

CC: (none) => herman.viaene
Whiteboard: MGA5TOO => MGA5TOO MGA5-32-OK

Comment 8 Len Lawrence 2017-11-07 19:52:56 CET
Testing on Mageia 6 x86_64 using firefox.

It is very difficult to find flashplayer videos online now.  Even the clips at adobe.com seem to default to the html5 player.  Right-clicking on the videos does not bring up the menu where you would expect to see "About Adobe Flash Player".  Googling finally led to  http://www.albinoblacksheep.com/flash/ and a lot of animations, definitely flashplayer.  Too much of that will blow your circuits.

They played fine though.

CC: (none) => tarazed25

Len Lawrence 2017-11-07 19:53:31 CET

Whiteboard: MGA5TOO MGA5-32-OK => MGA5TOO MGA5-32-OK MGA6-64-OK

Comment 9 PC LX 2017-11-07 20:37:03 CET
Installed and tested without issues.

Tested using Firefox 57.0b14 and konqueror 4.14.3. Several sites tested with video, audio, games. All worked.

System: Mageia 5, x86_64, Plasma DE, Intel CPU, nVidia GPU with proprietary driver nvidia340.

$ rpm -q flash-player-plugin
flash-player-plugin-27.0.0.183-1.mga5
$ uname -a
Linux marte 4.4.92-desktop-1.mga5 #1 SMP Thu Oct 12 20:14:45 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

CC: (none) => mageia
Whiteboard: MGA5TOO MGA5-32-OK MGA6-64-OK => MGA5TOO MGA5-32-OK MGA6-64-OK MGA5-64-OK

Comment 10 Len Lawrence 2017-11-08 07:25:11 CET
Three OKs should be enough to validate this.
Len Lawrence 2017-11-08 07:25:30 CET

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 11 Dave Hodgins 2017-11-10 14:20:39 CET
This srpm and rpm should be removed, and then resubmitted to the nonfree repositories.

Removing the validated tag

CC: (none) => davidwhodgins
Keywords: validated_update => feedback

Comment 12 Mike Rambo 2017-11-10 15:04:42 CET
This is a bugfix release.

https://forums.adobe.com/thread/2402259

As the old .170 version is no longer available I guess we should update.


Updated package uploaded for cauldron, Mageia 6, and Mageia 5.

Revised Advisory: 
======================== 

Updated flash-player-plugin package fixes bugs:

This release updates Flash Player with an important functional fix impacting
Flex content.

Updated packages in nonfree/updates_testing:
========================
flash-player-plugin-27.0.0.183-1.mga5
flash-player-plugin-kde-27.0.0.183-1.mga5

from: flash-player-plugin-27.0.0.183-1.mga5.src.rpm

flash-player-plugin-27.0.0.183-1.mga6

from: flash-player-plugin-27.0.0.183-1.mga6.src.rpm
Comment 13 Dave Hodgins 2017-11-10 15:19:01 CET
Testing complete on both arches, both releases, using
http://www.dhs.state.il.us/accessibility/tests/flash/video.html
and on both Mageia 5 arches, using Tools/Adobe Flash Player to delete data etc.

Used flash-player-plugin-27.0.0.183-1.mga5.nonfree and
flash-player-plugin-27.0.0.183-1.mga6.nonfree

Advisory added to svn. Validating the update.

Keywords: feedback => advisory, validated_update

Dave Hodgins 2017-11-10 15:38:30 CET

Whiteboard: MGA5TOO MGA5-32-OK MGA6-64-OK MGA5-64-OK => MGA5TOO MGA5-32-OK MGA6-64-OK MGA5-64-OK MGA6-32-OK

Comment 14 Mageia Robot 2017-11-10 20:33:49 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2017-0406.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.