Why no flash update today?

**estamets** · April 29th, 2014

http://helpx.adobe.com/security/prod...apsb14-13.html

We should be at 11.2.356.

These were updated today:
http://www.ubuntu.com/usn/

Is it because it's a level 3 priority which is "adminstrator discretion"? Just curious if that's the case.. Or if they need to take a peek at what's going on and repackage it or whatnot?

**WogBoy** · April 29th, 2014

I guess they forgot the update for linux.

Zero-day Flash bug under active attack in Windows threatens OS X, Linux too

http://arstechnica.com/security/2014...s-x-linux-too/

**Danny_Barbz** · April 29th, 2014

Originally Posted by WogBoy

I guess they forgot the update for linux.

What else is new?

**bashiergui** · April 30th, 2014

It's listed as priority 3 on Linux

This update resolves vulnerabilities in a product that has historically not been a target for attackers. Adobe recommends administrators install the update at their discretion.

http://helpx.adobe.com/security/severity-ratings.html

i'd read that to mean they focused on releasing the patch for systems actively being exploited (windows). I'd expect the linux update to come later.

**bashiergui** · April 30th, 2014

Originally Posted by WogBoy

Zero-day Flash bug under active attack in Windows threatens OS X, Linux too

http://arstechnica.com/security/2014...s-x-linux-too/

Wow that article is a confuddled mess. The author hasn't grasped the difference between the two identified attacks.
Cve-2014-1776 is the Internet Explorer vuln, not the flash one. A flash exploit is used in both attacks, one was an old vuln that had a patched released last year.

**claracc** · April 30th, 2014

I have just received today the flashplayer plugin update for my 12.04 ubuntu. See atached image.

**monkeybrain20122** · April 30th, 2014

I got the update in 14.04 and 13.10 earlier this afternoon/evening (no sure exactly when but when it was upgraded). I am wondering what will happen to Chrome and pepper flash... Was there a Chrome update?

**vasa1** · April 30th, 2014

Originally Posted by monkeybrain20122

I got the update in 14.04 and 13.10 earlier this afternoon/evening (no sure exactly when but when it was upgraded). I am wondering what will happen to Chrome and pepper flash... Was there a Chrome update?

There was one on the 24th: http://googlechromereleases.blogspot.com/. They're always updating

**estamets** · April 30th, 2014

Originally Posted by bashiergui

Wow that article is a confuddled mess. The author hasn't grasped the difference between the two identified attacks.
Cve-2014-1776 is the Internet Explorer vuln, not the flash one. A flash exploit is used in both attacks, one was an old vuln that had a patched released last year.

I'm glad I'm not the only one who thought it. I'm thinking to myself a few days ago that what I read didn't make sense. I also read that disabling flash in IE and then to use a different browser. Errr.. I was very confused.

I did get the update when I got home from work the next day. We're all good.

Here's the bigger question I have though. In the flash case. Is it better to take a version and patch the crap out of it or is it better to get new? I know we linux folks have another 3 years? on 11.2.

**bashiergui** · May 1st, 2014

Originally Posted by estamets

Here's the bigger question I have though. In the flash case. Is it better to take a version and patch the crap out of it or is it better to get new? I know we linux folks have another 3 years? on 11.2.

Not sure what you mean. If you installed flash brand new today, it would be the fully patched version. If you have updated your existing flash, then you have that same fully patched version.

flash is still getting updated for a few more years, no reason to bail yet.