Siduction Forum

Siduction Forum => Upgrade Warnings => Topic started by: michaa7 on 2015/02/02, 17:12:16

Title: (for v11.x (linux) revoked by Adobe) and agian: flash compromised;
Post by: michaa7 on 2015/02/02, 17:12:16
EDITED:

Quote
Revisions

February 2, 2015 - removed Flash Player version 11.x from the list of affected versions.  Version 11.x and earlier do not support the functionality affected by CVE-2015-0313. 


DE: http://www.heise.de/newsticker/meldung/Flash-Player-deaktivieren-Schon-wieder-Angriffe-auf-ungepatchte-Luecke-2535100.html

EN: http://helpx.adobe.com/security/products/flash-player/apsa15-02.html
Title: Re: and agian: flash compromised; it's recommended to deactivate flashplugin-nonfree
Post by: vilde on 2015/02/02, 18:32:19
Adobe flash=JÄVLA SKITPROGRAM  >:(

Pitty there are no good working substitute  :(
Title: Re: and agian: flash compromised; it's recommended to deactivate flashplugin-nonfree
Post by: paxmark2 on 2015/02/03, 01:24:14

from the adobe page

Quote
February 2, 2015 - removed Flash Player version 11.x from the list of affected versions.  Version 11.x and earlier do not support the functionality affected by CVE-2015-0313.   

Would this mean that the linux and bsd people are unaffected by this one?

note  edited out some size and color tags that got in
Title: Re: and agian: flash compromised; it's recommended to deactivate flashplugin-nonfree
Post by: reddark on 2015/02/03, 01:27:02
@paxmark2
sorry, no english .  i can .. ;)

Laut Adobe sind die folgenden Versionen des Flash-Players verwundbar:
 
Title: Re: and agian: flash compromised; it's recommended to deactivate flashplugin-nonfree
Post by: bluelupo on 2015/02/03, 07:42:20
@reddark, dieser verd.... Flashkram, warum gibt es immer noch Webseiten die dieses Bananenprodukt nutzen. Man könnte fast glauben die werden von ADOBE bezahlt.
Title: Re: and agian: flash compromised; it's recommended to deactivate flashplugin-nonfree
Post by: der_bud on 2015/02/03, 08:07:49
Hi reddark, paxmark2

EN:
reddark's citaziton above from Heise refers to an earlier version of Adobes Security Bulletin. As paxmark2 said, Adobe revised the document and now states that the vulnerability CVE-2015-0313 can not affect flash 11.x, as the functionality the exploit uses does not exist in those flash versions. So the current state is
Quote from: AdobeSecurityBulletin
Affected software versions
    Adobe Flash Player 16.0.0.296 and earlier versions for Windows and Macintosh
    Adobe Flash Player 13.0.0.264 and earlier 13.x versions

DE:
reddarks Zitat oben von Heise bezieht sich auf eine frühere Version des Adobe Security Bulletin. Wie paxmark2 schon sagt hat Adobe das Dokument gestern überarbeitet und erklärt, dass die Schwachstelle CVE-2015-0313 nicht in Flash 11.x angewendet werden kann, da die von der Sicherheitslücke ausgenutzte Funktionalität in diesen Flash-Versionen noch nicht existiert. Der aktuelle Status wäre also
Quote from: AdobeSecurityBulletin
Betroffene Software Versionen
    Adobe Flash Player 16.0.0.296 und frühere Versionen für Windows und Macintosh
    Adobe Flash Player 13.0.0.264 und frühere 13.x Versionen
___
[ OT ]  @bluelupo, +1, und leider lässt es sich manchmal nicht vermeiden dass man solche Webseiten ansurfen muss. Alle halbe Jahre wieder probiere ich Gnash aus, und bisher habe ich es immer nach ein paar Tagen wieder runtergeschmissen wg fehlender Funktionalitäten :( [ /OT ]