Adobe must think Linux users are a bunch of retards. It took them several days to release an update for their legacy Flash Player plugin for Linux – took them so long actually that Mozilla decided to block Flash in their Firefox browser. Now that’s a statement.
Finally, here are the Slackware packages for flashplayer-plugin version 11.2.202.491. This version is a fix for several new zero-day exploits actively used on-line after the code leaked from the “Hacking Team” break-in, so it is urgently advised to upgrade if you are still using Flash. And even then, it appears that another zero-day exploit has been uncovered, which Adobe acknowledges in their security bulletin but for which the latest Flash release does not offer protection.
If you wonder why I don’t mention that I also created packages for the Chromium PepperFlash plugin, that’s because I released that two days ago already!
Download locations for the Flash plugins:
- http://www.slackware.com/~alien/slackbuilds/ (master site)
- http://taper.alienbase.nl/mirrors/people/alien/slackbuilds/ (my own US mirror)
- http://alien.slackbook.org/slackbuilds/ (US)
- http://slackware.org.uk/people/alien/slackbuilds/ (UK)
Eric
Wish I could say I’m surprised. When all of this started, I disabled flash. Can’t say I miss it much. Read: at all.
Eric, can I ask you why you keep releasing flash player updates? Don’t you feel the time to discontinue them has arrived?
I have installed freshplayerplugin, which allows to use pepperflash in firefox (I had to install also many dependencies). And it works very well. Do you plan to replace flashplayer with freshplayerplugin in the future ?
adobe flash on firefox sometimes error, but maybe crash
I am not planning on replacing flashplayer-plugin with freshplayer. I think you should switch to Chromium anyway for a better Flash experience.
I will not stop updating the flashplayer-plugin – unless there are no further releases by Adobe of course. Enough people still need flash, on company networks for instance.
Ultimately it is up to you to decide that you no longer want or need to use Flash, but that does not withhold me from creating packages.
Deny Dias: apply cold water directly to the burn and everything should be ok.
When i looked at the security bulletin i can’t see that this version is still effected.
” Adobe Flash Player Extended Support Release version 11.2.202.481 and earlier 11.x versions for Linux” and you packaged 11.2.202.491.
Did i miss something?
At the time of writing, Adobe had not acknowledged that they had also added a fix for CVE-2015-5123 to their latest Flash player plugins, but in their Security Bulletin https://helpx.adobe.com/security/products/flash-player/apsb15-18.html they explicitly state:
“These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2015-5123)”
So all is well in the end. The waiting is for the next vulnerability to be uncovered 😉
With 400GB data i guess we will see a lot more vulnerabilities face the light.