Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #4946

Re: flashplugin-nonfree and latest Flash security updates

From Moritz Mühlenhoff <jmm@inutil.org>
Newsgroups linux.debian.security
Subject Re: flashplugin-nonfree and latest Flash security updates
Date 2016-08-03 21:10 +0200
Message-ID <s29Ie-6D8-19@gated-at.bofh.it> (permalink)
References <s1nke-834-33@gated-at.bofh.it> <s1SxH-3vo-3@gated-at.bofh.it>
Organization Cocytus

Show all headers | View raw


Nick Boyce <nick@glimmer.demon.co.uk> schrieb:
> I realise the nonfree plugin is not really supported, but given the
> serious (!!!) security implications of running a known-vulnerable Flash
> player for a significant time after a fixed version has been released,
> and assuming Bart is MIA for some reason, is it possible for the
> Security Team to either fix the update, or to make an announcement that
> all Debian users should stop using the Adobe player immediately ?

No, non-free/contrib is not supported by the security team.

Just don't use that crap. With the amount of zero days in Flash
you're subject to serious vulnerabilities even with an up-to-date
plugin.

Cheers,
        Moritz

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

flashplugin-nonfree and latest Flash security updates "Darren S." <phatbuckett@gmail.com> - 2016-08-01 17:30 +0200
  Re: flashplugin-nonfree and latest Flash security updates Francesco Negri <francesconegri@gmail.com> - 2016-08-01 18:30 +0200
  RE: flashplugin-nonfree and latest Flash security updates Nick Boyce <nick@glimmer.demon.co.uk> - 2016-08-03 02:50 +0200
    Re: flashplugin-nonfree and latest Flash security updates Paul Wise <pabs@debian.org> - 2016-08-03 12:00 +0200
      Re: flashplugin-nonfree and latest Flash security updates Rob van der Putten <rob@sput.nl> - 2016-08-03 21:00 +0200
        flash plugin from ubuntu (was: flashplugin-nonfree and latest Flash security updates) Stefan Fritsch <sf@sfritsch.de> - 2016-08-03 23:20 +0200
          Re: flash plugin from ubuntu (was: flashplugin-nonfree and latest  Flash security updates) Holger Levsen <holger@layer-acht.org> - 2016-08-04 00:10 +0200
            Re: flash plugin from ubuntu (was: flashplugin-nonfree and latest  Flash security updates) "Luedtke, Nicholas (HPE Linux Security)" <nicholas.luedtke@hpe.com> - 2016-08-04 04:40 +0200
              Re: flash plugin from ubuntu (was: flashplugin-nonfree and latest Flash security updates) Stefan Fritsch <sf@sfritsch.de> - 2016-08-04 22:20 +0200
        Re: flashplugin-nonfree and latest Flash security updates Jason Fergus <leech@thefnords.org> - 2016-08-05 17:00 +0200
      RE: flashplugin-nonfree and latest Flash security updates Nick Boyce <nick@glimmer.demon.co.uk> - 2016-08-04 04:20 +0200
    Re: flashplugin-nonfree and latest Flash security updates Moritz Mühlenhoff <jmm@inutil.org> - 2016-08-03 21:10 +0200
      RE: flashplugin-nonfree and latest Flash security updates Nick Boyce <nick@glimmer.demon.co.uk> - 2016-08-04 04:30 +0200
        Re: flashplugin-nonfree and latest Flash security updates Holger Levsen <holger@layer-acht.org> - 2016-08-04 08:20 +0200
  Re: flashplugin-nonfree and latest Flash security updates Bart Martens <bartm@debian.org> - 2016-08-04 01:00 +0200
    RE: flashplugin-nonfree and latest Flash security updates Nick Boyce <nick@glimmer.demon.co.uk> - 2016-08-04 04:50 +0200

csiph-web