Activity log for bug #334134

Date Who What changed Old value New value Message
2009-02-25 01:56:58 Scott Talbert bug added bug
2009-02-25 03:06:36 Scott Talbert bug added attachment 'flashplugin-nonfree_10.0.22.87ubuntu1~intrepid1.debdiff' (flashplugin-nonfree_10.0.22.87ubuntu1~intrepid1.debdiff)
2009-02-25 03:33:41 Scott Talbert bug added subscriber Ubuntu Security Team
2009-02-25 14:46:07 Fumihito YOSHIDA description Binary package hint: flashplugin-nonfree Adobe released version 10.0.22.87 of the Flash Player Plugin today. This means that the checksum of the install_flash_player_10_linux.tar.gz has changed and thus flashplugin-nonfree is currently un-installable - the install fails with an md5sum mismatch. Thus, the flashplugin-nonfree should be updated to contain the new md5sum values. Binary package hint: flashplugin-nonfree Adobe released version 10.0.22.87 of the Flash Player Plugin today. This means that the checksum of the install_flash_player_10_linux.tar.gz has changed and thus flashplugin-nonfree is currently un-installable - the install fails with an md5sum mismatch. Thus, the flashplugin-nonfree should be updated to contain the new md5sum values. CVE number: CVE-2009-0519, CVE-2009-0520, CVE-2009-0522, CVE-2009-0114, CVE-2009-0521 Advisory summary(from Adobe): > A potential vulnerability has been identified in Adobe Flash Player 10.0.12.36 and earlier that could allow an attacker > who successfully exploits this potential vulnerability to take control of the affected system. A malicious SWF must > be loaded in Flash Player by the user for an attacker to exploit this potential vulnerability. Additional vulnerabilities > have been addressed in this update. Adobe recommends users update to the most current version of Flash Player > available for their platform. Acton Items: Update flashplugin-nonfree's md5sums to; - Flash Player 10(Jaunty, Intrepid, Hardy-backports); => Update to 10.0.22.87 / Available in upstream(adobe). - Flash Player 9(Hardy, Gutsy, Dapper-backports); => Update to 9.0.159.0 / Available in upstream(adobe). - Flash Player 7(Dapper) => No way, use dapper-backports.
2009-02-25 14:46:07 Fumihito YOSHIDA title flashplugin-nonfree update needed due to upstream change flashplugin-nonfree update needed due to upstream change(APSB09-01)
2009-02-25 15:01:44 Mathieu Marquer flashplugin-nonfree: status New Confirmed
2009-02-25 15:01:44 Mathieu Marquer flashplugin-nonfree: statusexplanation
2009-02-25 16:26:58 Jamie Strandboge flashplugin-nonfree: status New In Progress
2009-02-25 16:27:00 Jamie Strandboge flashplugin-nonfree: importance Undecided High
2009-02-25 16:27:03 Jamie Strandboge flashplugin-nonfree: assignee jdstrand
2009-02-25 16:27:07 Jamie Strandboge flashplugin-nonfree: status New In Progress
2009-02-25 16:27:10 Jamie Strandboge flashplugin-nonfree: importance Undecided High
2009-02-25 16:27:13 Jamie Strandboge flashplugin-nonfree: assignee jdstrand
2009-02-25 16:27:17 Jamie Strandboge flashplugin-nonfree: status New In Progress
2009-02-25 16:27:20 Jamie Strandboge flashplugin-nonfree: importance Undecided High
2009-02-25 16:27:23 Jamie Strandboge flashplugin-nonfree: assignee jdstrand
2009-02-25 16:27:24 Jamie Strandboge flashplugin-nonfree: status Confirmed In Progress
2009-02-25 16:27:26 Jamie Strandboge flashplugin-nonfree: importance Undecided High
2009-02-25 16:27:32 Jamie Strandboge flashplugin-nonfree: assignee jdstrand
2009-02-25 17:20:12 Jamie Strandboge flashplugin-nonfree: status In Progress Fix Committed
2009-02-25 17:20:15 Jamie Strandboge flashplugin-nonfree: status In Progress Fix Committed
2009-02-25 17:20:17 Jamie Strandboge flashplugin-nonfree: status In Progress Fix Committed
2009-02-25 17:20:20 Jamie Strandboge flashplugin-nonfree: status In Progress Fix Committed
2009-02-25 18:23:26 Jamie Strandboge flashplugin-nonfree: status Fix Committed Fix Released
2009-02-25 18:23:28 Jamie Strandboge flashplugin-nonfree: status Fix Committed Fix Released
2009-02-25 18:23:33 Jamie Strandboge flashplugin-nonfree: status Fix Committed Fix Released
2009-02-25 18:23:36 Jamie Strandboge flashplugin-nonfree: status Fix Committed Fix Released