Bug 23565 - flash-player-plugin security update 31.0.0.108
Summary: flash-player-plugin security update 31.0.0.108
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 6
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: mga6-64-ok
Keywords: advisory, validated_update
: 23566 (view as bug list)
Depends on:
Blocks:
 
Reported: 2018-09-12 14:45 CEST by Nicolas Salguero
Modified: 2018-09-13 22:39 CEST (History)
7 users (show)

See Also:
Source RPM: flash-player-plugin
CVE: CVE-2018-15967
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2018-09-12 14:45:26 CEST 
Hi,

Version 31.0.0.108 fixes CVE-2018-15967.

References:
https://helpx.adobe.com/security/products/flash-player/apsb18-31.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15967

Best regards,

Nico.
Nicolas Salguero 2018-09-12 14:46:13 CEST

Whiteboard: (none) => MGA6TOO
CVE: (none) => CVE-2018-15967
Source RPM: (none) => flash-player-plugin

Comment 1 Thomas Backlund 2018-09-12 17:52:32 CEST 
*** Bug 23566 has been marked as a duplicate of this bug. ***

CC: (none) => quaiest

Comment 2 Marja Van Waes 2018-09-12 20:05:58 CEST 
Assigning to all packagers collectively, since there is no registered maintainer for this package.

CC'ing some committers.

Assignee: bugsquad => pkg-bugs
CC: (none) => marja11, mrambo, nicolas.salguero, smelror

Comment 3 Thomas Backlund 2018-09-12 20:57:58 CEST 
(S)RPM to test:

flash-player-plugin-31.0.0.108-1.mga6.nonfree

Whiteboard: MGA6TOO => (none)
Assignee: pkg-bugs => qa-bugs
CC: (none) => tmb
Version: Cauldron => 6

Comment 4 claire robinson 2018-09-13 18:35:23 CEST 
Testing complete mga6 64, validating.

Confirmed correct version downloaded

# urpmi flash-player-plugin


    $MIRRORLIST: media/nonfree/updates_testing/flash-player-plugin-31.0.0.108-1.mga6.nonfree.x86_64.rpm
installing flash-player-plugin-31.0.0.108-1.mga6.nonfree.x86_64.rpm from /var/cache/urpmi/rpms                                                                        
Preparing...                     ###########################################
Note that by downloading the Adobe Flash Player you indicate your acceptance of
the EULA, available at http://www.adobe.com/products/eulas/players/flash/
Downloading from http://fpdownload.adobe.com/get/flashplayer/pdc/31.0.0.108/flash-player-ppapi-31.0.0.108-release.x86_64.rpm:
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 9228k  100 9228k    0     0  3089k      0  0:00:02  0:00:02 --:--:-- 3276k
      1/1: flash-player-plugin   #################################################
Adobe Flash Player installation successful.
      1/1: removing flash-player-plugin-30.0.0.154-1.mga6.nonfree.x86_64
                                 ###########################################


Usual tests..
https://get.adobe.com/flashplayer/about/

You have version 31,0,0,108 installed


Played flash games.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs
Whiteboard: (none) => mga6-64-ok

Thomas Backlund 2018-09-13 22:13:53 CEST

Keywords: (none) => advisory

Comment 5 Mageia Robot 2018-09-13 22:39:03 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0372.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.