Results 1 to 10 of 10

Thread: Why no flash update today?

  1. #1
    Join Date
    Nov 2013
    Location
    Indiana
    Beans
    15
    Distro
    Ubuntu Development Release

    Why no flash update today?

    http://helpx.adobe.com/security/prod...apsb14-13.html

    We should be at 11.2.356.

    These were updated today:
    http://www.ubuntu.com/usn/

    Is it because it's a level 3 priority which is "adminstrator discretion"? Just curious if that's the case.. Or if they need to take a peek at what's going on and repackage it or whatnot?

  2. #2
    Join Date
    Apr 2014
    Beans
    34

    Re: Why no flash update today?

    I guess they forgot the update for linux.

    Zero-day Flash bug under active attack in Windows threatens OS X, Linux too

    http://arstechnica.com/security/2014...s-x-linux-too/
    Kubuntu 14.04 LTS 64bit --- Hp Pavilion G6, AMD A4-3305M With Radeon HD Graphics 1.90 Ghz 4GbRam 250GB Samsung SSD.

  3. #3
    Join Date
    Oct 2013
    Beans
    1

    Re: Why no flash update today?

    Quote Originally Posted by WogBoy View Post
    I guess they forgot the update for linux.
    What else is new?

  4. #4
    Join Date
    Nov 2013
    Location
    On the edge
    Beans
    843
    Distro
    Ubuntu

    Re: Why no flash update today?

    It's listed as priority 3 on Linux
    This update resolves vulnerabilities in a product that has historically not been a target for attackers. Adobe recommends administrators install the update at their discretion.
    http://helpx.adobe.com/security/severity-ratings.html

    i'd read that to mean they focused on releasing the patch for systems actively being exploited (windows). I'd expect the linux update to come later.
    Knock knock.
    Race condition.
    Who's there?

  5. #5
    Join Date
    Nov 2013
    Location
    On the edge
    Beans
    843
    Distro
    Ubuntu

    Re: Why no flash update today?

    Quote Originally Posted by WogBoy View Post
    Zero-day Flash bug under active attack in Windows threatens OS X, Linux too

    http://arstechnica.com/security/2014...s-x-linux-too/
    Wow that article is a confuddled mess. The author hasn't grasped the difference between the two identified attacks.
    Cve-2014-1776 is the Internet Explorer vuln, not the flash one. A flash exploit is used in both attacks, one was an old vuln that had a patched released last year.
    Knock knock.
    Race condition.
    Who's there?

  6. #6
    Join Date
    Jan 2009
    Location
    Santander, Spain
    Beans
    1,968
    Distro
    Ubuntu Gnome 16.04 Xenial Xerus

    Re: Why no flash update today?

    I have just received today the flashplayer plugin update for my 12.04 ubuntu. See atached image.
    Attached Images Attached Images

  7. #7
    Join Date
    Aug 2013
    Beans
    3,106

    Re: Why no flash update today?

    I got the update in 14.04 and 13.10 earlier this afternoon/evening (no sure exactly when but when it was upgraded). I am wondering what will happen to Chrome and pepper flash... Was there a Chrome update?

  8. #8
    Join Date
    Dec 2007
    Beans
    9,280
    Distro
    Lubuntu 16.04 Xenial Xerus

    Re: Why no flash update today?

    Quote Originally Posted by monkeybrain20122 View Post
    I got the update in 14.04 and 13.10 earlier this afternoon/evening (no sure exactly when but when it was upgraded). I am wondering what will happen to Chrome and pepper flash... Was there a Chrome update?
    There was one on the 24th: http://googlechromereleases.blogspot.com/. They're always updating
    Shortened urls: See point #11 here. And clicking on them could be risky.
    Use ubuntu-support-status with caution.

  9. #9
    Join Date
    Nov 2013
    Location
    Indiana
    Beans
    15
    Distro
    Ubuntu Development Release

    Re: Why no flash update today?

    Quote Originally Posted by bashiergui View Post
    Wow that article is a confuddled mess. The author hasn't grasped the difference between the two identified attacks.
    Cve-2014-1776 is the Internet Explorer vuln, not the flash one. A flash exploit is used in both attacks, one was an old vuln that had a patched released last year.
    I'm glad I'm not the only one who thought it. I'm thinking to myself a few days ago that what I read didn't make sense. I also read that disabling flash in IE and then to use a different browser. Errr.. I was very confused.

    I did get the update when I got home from work the next day. We're all good.

    Here's the bigger question I have though. In the flash case. Is it better to take a version and patch the crap out of it or is it better to get new? I know we linux folks have another 3 years? on 11.2.

  10. #10
    Join Date
    Nov 2013
    Location
    On the edge
    Beans
    843
    Distro
    Ubuntu

    Re: Why no flash update today?

    Quote Originally Posted by estamets View Post
    Here's the bigger question I have though. In the flash case. Is it better to take a version and patch the crap out of it or is it better to get new? I know we linux folks have another 3 years? on 11.2.
    Not sure what you mean. If you installed flash brand new today, it would be the fully patched version. If you have updated your existing flash, then you have that same fully patched version.

    flash is still getting updated for a few more years, no reason to bail yet.
    Knock knock.
    Race condition.
    Who's there?

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •