flashplugin-nonfree-9.0.31 is vulnerable CVE-2007-3456

[David H]

Could you please update flashplugin-nonfree package to 9.0.48. 9.0.31 is vulnerable. See https://bugs.launchpad.net/bugs/125986
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3456

I'm running flashplugin-nonfree 9.0.48.0.0ubuntu1~7.04.1 (from feisty-updates) on dapper and it seems to work fine.

Thanks

[Scott Kitterman (kitterman)]

Additionally, we need confirmation that it will build correctly in the dapper environment too.

[Scott Kitterman (kitterman)]

Marked the bug not confidential because it's already a public security vulnerability.

[Saivann Carignan (oxmosys)]

I suspect that this bug has been forgotten since the actual dapper backport flash version is 9.0.48. According to this fact, I set the status to fix released but you can set it back to new if there's still some work to do on this bug.