My thoughts on Slackware, life and everything

Tag: flash (Page 6 of 13)

Last week’s security updates

adobe_flash_8s600x600_2Adobe released updated Flash player plugins last tuesday, but I was too busy with other things to write a blog post about it. However, I did release updated packages the day after! The updates are for chromium-pepperflash-plugin (to be used together with my chromium package) with new version 19.0.0.245, and flashplayer-plugin which now is at version 11.2.202.548.

The PepperFlash plugin was extracted from Google Chrome 46.0.2490.86 but I did not compile a new Chromium package from the sources bearing that version this time. You’ll have to wait for the next stable release.

.

icedteaVersion 2.6.3 of IcedTea was also released last week. This version of IcedTea will compile OpenJDK 7 “Update 91 Build 02“. The release adds one missed security fix from Oracle’s october updates to OpenJDK. I could not find the announcement on the blog of release maintainer Andrew Hughes but here is his post on the mailing list instead.

The CVE which has been addressed and fixed:

  • S8142882, CVE-2015-4871: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed.

Note about OpenJDK usage:

I release packages for the JRE (runtime environment) and the JDK (development kit) simultaneously, but you only need to install one of the two. The JRE is sufficient if you only want to run Java programs (including Java web plugins). Only in case where you’d want to develop Java programs and need a Java compiler, you are in need of the JDK package.

The Java package (openjre as well as openjdk) has one dependency: rhino provides JavaScript support for OpenJDK.

Optionally: If you want to use Java in a web browser then you’ll have to install my icedtea-web package too. While Oracle’s binary JDK tarball contains a browser plugin, that one is closed-source and therefore Icedtea offers an open source variant which does a decent job. Note that icedtea-web is a NPAPI plugin – this prevents use of Java in Chrome & Chromium because those browsers only support PPAPI plugins, but you’ll be OK with all Mozilla [-compatible] browsers of course.

My download locations for these updated packages are as always:

If you are using the slackpkg+ extension for slackpkg, then you just run “slackpkg update && slackpkg update flash”. Alternatively, you can subscribe to my repository RSS feed to stay informed of any updates.

Have fun! Eric

 

October ’15 security fixes for Adobe Flash

adobe_flash_8s600x600_2Adobe released updated Flash player plugins yesterday, which adddress newly discovered vulnerabilities. I applied those updates to my repository and the packages are ready for you to download and install.

The updated Slackware package for chromium-pepperflash-plugin (to be used together with my chromium package) has version 19.0.0.207. The updated flashplayer-plugin has version 11.2.202.535.

The PepperFlash plugin is extracted from Google Chrome 46.0.2490.71 (first stable 46 release). The accompanying source code for Chromium has become available today, so I am going to compile that later into a chromium package for Slackware.

My download locations for the Flash plugin packages are as always:

If you are using the slackpkg+ extension for slackpkg, then you just run “slackpkg update && slackpkg update flash”. Alternatively, you can subscribe to my repository RSS feed to stay informed of any updates.

Eric

September updates for Adobe Flash

adobe_flash_8s600x600_2 Actually… this time “patch tuesday” came on monday for Adobe’s Flash player plugin. The company released a bulletin for updated Flash player plugins yesterday and I had my packages up in the repository before the end of monday. It was the end of a busy day that started at 03:45 no thanks to an eager TCS escalation manager who called me twice for no good reason, so I did not have energy left to write a blog post in the evening.

This post puts an end to that hiatus: I can now point you to my Slackware packages for chromium-pepperflash-plugin (to be used together with my chromium browser package) which moved up to version 19.0.0.185, while the flashplayer-plugin (for Mozilla-compatible browsers) got incremented to 11.2.202.521.

The main download locations for the Flash plugin packages are as always:

If you are using the slackpkg+ extension for slackpkg, then you just run “slackpkg update && slackpkg update flash”. Alternatively, you can subscribe to my repository RSS feed to stay informed of any updates.

Eric

August ’15 security fixes for Adobe Flash

adobe_flash_8s600x600_2In their “tuesday is patch day” routine, Adobe released updated Flash player plugins which adddress many new vulnerabilities (as usual).

For your information: The updated Slackware package for chromium-pepperflash-plugin (to be used together with my chromium package) has version 18.0.0.233. The updated flashplayer-plugin has version 11.2.202.508.

The Chromium plugin was extracted from the official Google Chrome 44.0.2403.155 RPM which was released yesterday. New packages for my own chromium package based on the sources of that same version are being compiled at the moment… it always takes half a day for the sources to become available for download.

My download locations for the Flash plugin packages are unchanged:

If you are using the slackpkg+ extension for slackpkg, then you just run “slackpkg update && slackpkg update flash”. Alternatively, you can subscribe to my repository RSS feed to stay informed of any updates.

Eric

And finally, Adobe’s afterthought

adobe_flash_8s600x600_2 Adobe must think Linux users are a bunch of retards. It took them several days to release an update for their legacy Flash Player plugin for Linux – took them so long actually that Mozilla decided to block Flash in their Firefox browser. Now that’s a statement.

Finally, here are the Slackware packages for flashplayer-plugin version 11.2.202.491. This version is a fix for several new zero-day exploits actively used on-line after the code leaked from the “Hacking Team” break-in, so it is urgently advised to upgrade if you are still using Flash. And even then, it appears that another zero-day exploit has been uncovered, which Adobe acknowledges in their security bulletin but for which the latest Flash release does not offer protection.

If you wonder why I don’t mention that I also created packages for the Chromium PepperFlash plugin, that’s because I released that two days ago already!

Download locations for the Flash plugins:

Eric

« Older posts Newer posts »

© 2024 Alien Pastures

Theme by Anders NorenUp ↑