Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Thu 23 May 2013, 21:04
All times are UTC - 4

 Forum index » Off-Topic Area » Security
Adobe Flash new security update. Important vulnerability.
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [10 Posts]  
Author Message
nooby

Joined: 29 Jun 2008
Posts: 9389
Location: SwedenEurope
PostPosted: Tue 07 Jun 2011, 16:06    Post subject:  Adobe Flash new security update. Important vulnerability.  
Computerworld has text about it.

http://www.computerworld.com/s/article/9217346/Hackers_exploit_Flash_bug_in_new_attacks_against_Gmail_users

Quote:
Adobe today confirmed that the Flash Player bug it patched Sunday is being used to steal login credentials of Google's Gmail users.

The vulnerability was patched yesterday in an "out-of-band," or emergency update. The fix was the second in less than four weeks for Flash, and the fifth this year. A weekend patch is very unusual for Adobe.

"We have reports that this vulnerability is being exploited in the wild in active targeted attacks designed to trick the user into clicking on a malicious link delivered in an email message," said Adobe spokeswoman Wiebke Lips in response to questions today. "The reports we received indicate that the current attacks are targeting Gmail specifically. However, we cannot assume that other Web mail providers may not be targeted as well."

According to Adobe's advisory, the Flash vulnerability is a cross-site scripting bug.

Cross-site scripting flaws are often used by identity thieves to hijack usernames and passwords from vulnerable browsers. In this case, browsers themselves are not targeted; rather, attackers are exploiting the Flash Player browser plug-in, which virtually every user has installed.


For us that fails to do such things I hope some who are good at it give some easy to get instruction how to install it on frugal install.

It could be as easy as one just replace one file with another.

But things are easy if one knows and almost impossible for those who don't know.
_________________

I'm a noob so I use Google Search of Puppy Forum
Back to top
View user's profile Send private message 
2byte

Joined: 09 Oct 2006
Posts: 356
PostPosted: Fri 10 Jun 2011, 13:11    Post subject:  
For Firefox or Seamonkey

Go to http://get.adobe.com/flashplayer/

Choose the *.tar.gz for other Linux file download

Extract libflashplayer.so

In /usr/lib/mozilla/plugins:
Re-name libflashplayer.so to libflashplayer.so.OLD
Move the newly extracted libflashplayer.so to /usr/lib/mozilla/plugins/
Restart the browser.
_________________

Back to top
View user's profile Send private message 
nooby

Joined: 29 Jun 2008
Posts: 9389
Location: SwedenEurope
PostPosted: Tue 14 Jun 2011, 02:08    Post subject:  
Yes thanks. What I fail is the extract thing. But I guess practice would help.
_________________

I'm a noob so I use Google Search of Puppy Forum
Back to top
View user's profile Send private message 
James C


Joined: 26 Mar 2009
Posts: 4742
Location: Kentucky
PostPosted: Tue 14 Jun 2011, 02:37    Post subject:  
nooby wrote:
Yes thanks. What I fail is the extract thing. But I guess practice would help.


Just for you, nooby. Smile

Just download and save the flashplayer tar.gz from the link above. Go to where you downloaded to and click on the install flash player tar.gz. See screenshot one.
When you click on the tar.gz X archive should open. Click on "select all".See screenshot two.
Next click on "extract", then "OK" on the little window that pops up.See screenshot three.
Go back to where the download is and you'll see "libflashplayer.so".See screenshot four.
Move "libflashplayer.so" to replace the older version.

HTH.
screenshot four.png
 Description   
 Filesize   26.54 KB
 Viewed   941 Time(s)

screenshot four.png
screenshot three.png
 Description   
 Filesize   118.5 KB
 Viewed   943 Time(s)

screenshot three.png
screenshot two.png
 Description   
 Filesize   106.58 KB
 Viewed   947 Time(s)

screenshot two.png
screenshot one.png
 Description   
 Filesize   131.98 KB
 Viewed   935 Time(s)

screenshot one.png
Back to top
View user's profile Send private message 
Bligh

Joined: 08 Jan 2006
Posts: 459
Location: California
PostPosted: Tue 14 Jun 2011, 03:45    Post subject:  
Thanks, I'll have to get it and copy it to flash drive to copy it to all my systems.
Cheers
Back to top
View user's profile Send private message 
Sylvander

Joined: 15 Dec 2008
Posts: 2855
Location: West Lothian, Scotland, UK
PostPosted: Tue 14 Jun 2011, 05:01    Post subject:  
Replaced the old libflashplayer.so with the new [having renamed the old].

How do I test if it's working as it aught?
Back to top
View user's profile Send private message 
nooby

Joined: 29 Jun 2008
Posts: 9389
Location: SwedenEurope
PostPosted: Tue 14 Jun 2011, 05:41    Post subject:  
Thanks James.

Sylvander maybe the Adobe Flash site have a test link. Yhey have a link that tells that one use the version at least I did a test now but have already lost the link.

But an easy way to install is to use this link.
http://puppylinux.org/wikka/libflashplayer click on this one
libflashplayer-10.3.181.26.pet

Which is the latest that is also mention as the update on the Adobe site.
oops found the link again click here
http://www.adobe.com/software/flash/about/

That will confirm if the installation worked.

oops maybe I linked to the wrong one. So sorry.
What about the one I test here above then?
Thanks Sylvander your link is better in that way but mine show what version one have ? so both maybe fill a function.
_________________

I'm a noob so I use Google Search of Puppy Forum

Last edited by nooby on Wed 15 Jun 2011, 09:20; edited 3 times in total
Back to top
View user's profile Send private message 
Sylvander

Joined: 15 Dec 2008
Posts: 2855
Location: West Lothian, Scotland, UK
PostPosted: Tue 14 Jun 2011, 08:51    Post subject:  
nooby, that link is to a page for testing in Windows.

I found this testing page, and it showed the newly updated libflashplayer.so not working.

So I uninstalled the old Flash Player, and used the the PET you linked to install version 10.3.181.22

Now the testing page linked by me above shows it to be functioning. Very Happy

Thanks nooby. Cool
Back to top
View user's profile Send private message 
xman


Joined: 24 Sep 2009
Posts: 145
PostPosted: Wed 15 Jun 2011, 08:55    Post subject: 10.3.181.26  
nooby wrote:
But an easy way to install is to use this link.
http://puppylinux.org/wikka/libflashplayer click on this one
libflashplayer-10.3.181.22.pet

Old one? 10.3.181.26 is out!
http://www.adobe.com/support/security/bulletins/apsb11-18.html
Back to top
View user's profile Send private message 
nooby

Joined: 29 Jun 2008
Posts: 9389
Location: SwedenEurope
PostPosted: Wed 15 Jun 2011, 09:19    Post subject:  
Yes and updated with that one on that link too so I edit it.
_________________

I'm a noob so I use Google Search of Puppy Forum
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [10 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

[ Time: 0.0592s ][ Queries: 13 (0.0091s) ][ GZIP on ]