flashplugin-nonfree update needed due to upstream change(APSB09-01)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
flashplugin-nonfree (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge | ||
Gutsy |
Fix Released
|
High
|
Jamie Strandboge | ||
Hardy |
Fix Released
|
High
|
Jamie Strandboge | ||
Intrepid |
Fix Released
|
High
|
Jamie Strandboge | ||
Jaunty |
Fix Released
|
High
|
Jamie Strandboge |
Bug Description
Binary package hint: flashplugin-nonfree
Adobe released version 10.0.22.87 of the Flash Player Plugin today. This means that the checksum of the install_
CVE number: CVE-2009-0519, CVE-2009-0520, CVE-2009-0522, CVE-2009-0114, CVE-2009-0521
Advisory summary(from Adobe):
> A potential vulnerability has been identified in Adobe Flash Player 10.0.12.36 and earlier that could allow an attacker
> who successfully exploits this potential vulnerability to take control of the affected system. A malicious SWF must
> be loaded in Flash Player by the user for an attacker to exploit this potential vulnerability. Additional vulnerabilities
> have been addressed in this update. Adobe recommends users update to the most current version of Flash Player
> available for their platform.
Acton Items:
Update flashplugin-
- Flash Player 10(Jaunty, Intrepid, Hardy-backports);
=> Update to 10.0.22.87 / Available in upstream(adobe).
- Flash Player 9(Hardy, Gutsy, Dapper-backports);
=> Update to 9.0.159.0 / Available in upstream(adobe).
- Flash Player 7(Dapper)
=> No way, use dapper-backports.
description: | updated |
Changed in flashplugin-nonfree: | |
status: | New → Confirmed |
Changed in flashplugin-nonfree: | |
status: | New → In Progress |
importance: | Undecided → High |
assignee: | nobody → jdstrand |
status: | New → In Progress |
importance: | Undecided → High |
assignee: | nobody → jdstrand |
status: | New → In Progress |
importance: | Undecided → High |
assignee: | nobody → jdstrand |
status: | Confirmed → In Progress |
importance: | Undecided → High |
assignee: | nobody → jdstrand |
Changed in flashplugin-nonfree: | |
status: | In Progress → Fix Committed |
status: | In Progress → Fix Committed |
status: | In Progress → Fix Committed |
status: | In Progress → Fix Committed |
Attached is a debdiff that I believe resolves the issue. It worked OK for me.