Arch Linux

toad

Member

From: if only I knew

Registered: 2008-12-22

Posts: 1,775

Website

Adobe acknowledges critical security flaw in software...

Link to BBC article:

http://news.bbc.co.uk/2/hi/technology/10257411.stm

Adobe says the vulnerability potentially enables hackers to take control of affected computer systems.

Users running Windows, Macintosh or Linux might all be open to attack.

The company is working to fix the problem. In the meantime, users of Reader, Acrobat and Flash are advised to ensure their anti-virus software is up to date.

My antivirus software? God forbid...  Is this some new kind of FUD?

What other sources have you found - perhaps even with more detailed info?

---

never trust a toad...
::Grateful ArchDonor::
::Grateful Wikipedia Donor::

Ogion

Member

From: Germany

Registered: 2007-12-11

Posts: 367

Re: Adobe acknowledges critical security flaw in software...

This on the adobe page.
They also tell about deleting some authplay.so file, which i don't have (well i only have the flashplugin installed and not the Reader anyway).

Ogion

---

(my-dotfiles)
"People willing to trade their freedom for temporary security deserve neither and will lose both." - Benjamin Franklin
"Enlightenment is man's leaving his self-caused immaturity." - Immanuel Kant

toxygen

Member

Registered: 2008-08-22

Posts: 713

Re: Adobe acknowledges critical security flaw in software...

Adobe says the vulnerability potentially enables hackers to take control of affected computer systems.

Users running Windows, Macintosh or Linux might all be open to attack.

My antivirus software? God forbid...  Is this some new kind of FUD?
What other sources have you found - perhaps even with more detailed info?

maybe they dont want to make windows users feel singled out, so they say it affects everyone else too!

---

"I know what you're thinking, 'cause right now I'm thinking the same thing. Actually, I've been thinking it ever since I got here:
Why oh why didn't I take the BLUE pill?"

anonymous_user

Member

Registered: 2009-08-28

Posts: 3,059

Re: Adobe acknowledges critical security flaw in software...

Ramses de Norre

Member

From: Leuven - Belgium

Registered: 2007-03-27

Posts: 1,289

Re: Adobe acknowledges critical security flaw in software...

You can install the release candidate of flashplugin 10.1, I just changed the version and download url from the PKGBUILD in my abs tree and it seems to work. This version should not be vulnerable to the security flaw, according to the adobe site.

pkgname=flashplugin
_licensefile='Reader_Player_AIR_WWEULA-Combined-20080204_1313.pdf'
pkgver=10.1.rc7
pkgrel=1
pkgdesc='Adobe Flash Player'
url='http://get.adobe.com/flashplayer'
arch=('i686')
depends=('mozilla-common' 'libxt' 'gtk2' 'nss' 'curl')
replaces=('flashplugin-beta')
provides=('flashplayer')
license=('custom')
source=('http://download.macromedia.com/pub/labs/flashplayer10/flashplayer10_1_rc7_linux_060210.so.tar.gz'
        "http://www.adobe.com/products/eulas/pdfs/${_licensefile}")

build() {
  install -d -m755 ${pkgdir}/usr/lib/mozilla/plugins/ || return 1
  install -m755 ${srcdir}/libflashplayer.so ${pkgdir}/usr/lib/mozilla/plugins/ || return 1
  install -d -m755 ${pkgdir}/usr/share/licenses/${pkgname}/ || return 1
  install -m644 "${_licensefile}" ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.pdf || return 1
}
md5sums=('e4cb4d26124605a54c3d498cc440368f'
         '1636037610ee2aa35c5fb736a697b7e0')

Edit: I just made it so it works on my 32 bit system, 64 bit users will need to change the download url and md5sum.

Last edited by Ramses de Norre (2010-06-08 17:23:39)

Skripka

Member

From: 2X1280X1024

Registered: 2009-02-19

Posts: 555

Re: Adobe acknowledges critical security flaw in software...

I presume the 10.1 RC is only available for 32bit platforms and not 64bit?

toad

Member

From: if only I knew

Registered: 2008-12-22

Posts: 1,775

Website

Re: Adobe acknowledges critical security flaw in software...

Worked for me on 64-bit, but I've got some 32-bit libraries on the system anyway. I removed plashplugin followed by:

toad@deskarch 940\10 ~ > sudo packer -S lib32-flashplugin-prerelease

Aur Targets    (1): lib32-flashplugin-prerelease
Pacman Targets (2): lib32-curl lib32-nss

Proceed with installation? [Y/n] 
resolving dependencies...
looking for inter-conflicts...

Targets (3): lib32-curl-7.20.1-1 [0.13 MB]  lib32-nspr-4.8.4-1 [0.10 MB]  lib32-nss-3.12.6-3 [0.89 MB]  

Total Download Size:    1.11 MB
Total Installed Size:   3.45 MB

---

never trust a toad...
::Grateful ArchDonor::
::Grateful Wikipedia Donor::

Anikom15

Banned

From: United States

Registered: 2009-04-30

Posts: 836

Website

Re: Adobe acknowledges critical security flaw in software...

Adobe says the vulnerability potentially enables hackers to take control of affected computer systems.

Users running Windows, Macintosh or Linux might all be open to attack.

My antivirus software? God forbid...  Is this some new kind of FUD?
What other sources have you found - perhaps even with more detailed info?

maybe they dont want to make windows users feel singled out, so they say it affects everyone else too!

I think you're right.

---

Personally, I'd rather be back in Hobbiton.