Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 663684

Summary: [ASB] www-plugins/adobe-flash-30.0.0.154 version bump
Product: Gentoo Linux Reporter: Manfred Knick <Manfred.Knick>
Component: Current packagesAssignee: Jeroen Roovers (RETIRED) <jer>
Status: RESOLVED OBSOLETE    
Severity: normal CC: strogdon
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Manfred Knick 2018-08-15 15:58:09 UTC
published on August 14, 2018
classified as "important"

     30.0.0.154 for Chrome OS, Linux, macOS and Windows

all prior versions declared as "vulnerable"



Adobe Security Bulletin
Security updates available for Flash Player | APSB18-25

Bulletin ID 	Date Published 	Priority
APSB18-25 	August 14, 2018 	2
Summary

Adobe has released security updates for Adobe Flash Player for Windows, macOS, Linux and Chrome OS. These updates address important vulnerabilities in Adobe Flash Player 30.0.0.134 and earlier versions.  Successful exploitation could lead to arbitrary code execution in the context of the current user.

[ https://helpx.adobe.com/security/products/flash-player/apsb18-25.html ]
Comment 1 Manfred Knick 2018-08-15 18:06:43 UTC
Already arrived in tree:

     [IP-] [  ] www-plugins/adobe-flash-30.0.0.154:22

Thanks to Jeroen!
Comment 2 Steven Trogdon 2018-09-14 01:57:04 UTC
Fetch of the tarball fails here. Not sure what the correct location should be

>>> Emerging (1 of 1) www-plugins/adobe-flash-30.0.0.154::gentoo
>>> Downloading 'https://fpdownload.adobe.com/pub/flashplayer/pdc/30.0.0.154/flash_player_npapi_linux.x86_64.tar.gz'
--2018-09-13 20:28:30--  https://fpdownload.adobe.com/pub/flashplayer/pdc/30.0.0.154/flash_player_npapi_linux.x86_64.tar.gz
Resolving fpdownload.adobe.com... 173.222.35.216, 2001:428:1802:58d::11e2, 2001:428:1802:581::11e2
Connecting to fpdownload.adobe.com|173.222.35.216|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2018-09-13 20:28:30 ERROR 404: Not Found.

!!! Couldn't download 'adobe-flash-30.0.0.154-npapi.x86_64.tar.gz'. Aborting.
 * Fetch failed for 'www-plugins/adobe-flash-30.0.0.154', Log file:
 *  '/var/tmp/portage/www-plugins/adobe-flash-30.0.0.154/temp/build.log'
Comment 3 Manfred Knick 2018-09-14 07:38:22 UTC
(In reply to Steven Trogdon from comment #2)

Adobe has fallen back to version 31.0.0.108:

   Today's Download Link provided by official Adobe site:

https://fpdownload.adobe.com/get/flashplayer/pdc/31.0.0.108/flash_player_npapi_linux.x86_64.tar.gz
Comment 4 Manfred Knick 2018-09-14 07:48:59 UTC
(In reply to Manfred Knick from comment #3)

> Adobe has fallen back to version 31.0.0.108:
https://helpx.adobe.com/security/products/flash-player/apsb18-31.html

referencing CVE-2018-15967.

Thanks to Jeroen for invalidating 154.

Closing as "obsolete".