Linux Lite Forums
[SOLVED] Firefox 32.0.3 Flash Plugin Vulnerability - Printable Version

+- Linux Lite Forums (https://www.freecinema2022.gq/forums)
+-- Forum: General (https://www.freecinema2022.gq/forums/forumdisplay.php?fid=4)
+--- Forum: On Topic (https://www.freecinema2022.gq/forums/forumdisplay.php?fid=14)
+--- Thread: [SOLVED] Firefox 32.0.3 Flash Plugin Vulnerability (/showthread.php?tid=1268)



[SOLVED] Firefox 32.0.3 Flash Plugin Vulnerability - dby - 12-13-2014

HI
I'm running LL 2.0 32 bit, which has Firefox 32.0.3 installed. However, it is now out of date and I'm getting warnings about the Flash Plugin being vulnerable and should be updated. Mozilla recommend installation through the repository updates but as these don't seem forthcoming, I'm wondering if it would be wise to update to Firefox 34.0.5 manually and also update the Flash Plugin manually.


I would be happy to read any views on this as Firefox is my prefered browser (Chrome's so sluggish these days).


Regards
dby  :-\


Re: Firefox 32.0.3 Flash Plugin Vulnerability - Scott(0) - 12-13-2014

Hi Dby,


Have you had a chance to run "install updates"  (menu > all > install updates)? This should install a FF update to 34.0 and update flash to the current version. Is this not the case?


Re: Firefox 32.0.3 Flash Plugin Vulnerability - newtusmaximus - 12-13-2014

I have
a) upgraded to Firefox 34.0 via LL install updates and Flash plugin still does not work
so
Uninstalled flash plug in
https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons#w_how-to-uninstall-plugins
and then followed instructions as per this link.
http://linuxg.net/use-googles-pepper-flash-inside-your-firefox-browser-via-fresh-player-plugin-tweaks-available-for-ubuntu-14-04-ubuntu-13-10-ubuntu-12-04-and-derivative-systems/

Seems to work but still testing.


Re: Firefox 32.0.3 Flash Plugin Vulnerability - dby - 12-14-2014

Thank you both for your replies, sorry I'm a little late getting back to you. Scott I have run the updates but this is the latest version of Firefox that installs on my system. That's why I was looking for alternatives as the repositories are not offering a newer version. But I'll continue to run the updates each day.

Newtusmaximus (great name by the way), I'll try as you suggest and get back with the results.

Many thanks
dby Smile



Re: Firefox 32.0.3 Flash Plugin Vulnerability - dby - 12-18-2014

It still seems the LL repositories are only offering me Firefox 32 with a vulnerable Flash plugin but I've now added the Mozilla ppa, updated and I now have Firefox 34 with currently no vulnerability warnings. For the moment I'll mark this 'Solved'.

Once again thanks for the replies.  Smile
dby


Re: Firefox 32.0.3 Flash Plugin Vulnerability - Scott(0) - 12-18-2014

Hi Dby,

Please paste your sources.list file (/etc/apt/sources.list). I've been unable to reproduce this error. I've tried a virtualbox installation and the live-cd environment, both list updated versions of firefox and flash.


Re: Firefox 32.0.3 Flash Plugin Vulnerability - dby - 12-19-2014

Scott
Here I hope is the correct sources list you wished to see.

# deb http://us.archive.ubuntu.com/ubuntu/ trusty main restricted

# deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates main restricted
# deb http://security.ubuntu.com/ubuntu trusty-security main restricted

# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://mirrors.manchester.m247.com/ubuntu/ trusty main restricted
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-updates main restricted
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-updates main restricted

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb http://mirrors.manchester.m247.com/ubuntu/ trusty universe
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty universe
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-updates universe
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-updates universe

## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb http://mirrors.manchester.m247.com/ubuntu/ trusty multiverse
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty multiverse
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-updates multiverse
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-updates multiverse

## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-backports main restricted universe multiverse
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-backports main restricted universe multiverse

deb http://mirrors.manchester.m247.com/ubuntu/ trusty-security main restricted
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-security main restricted
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-security universe
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-security universe
deb http://mirrors.manchester.m247.com/ubuntu/ trusty-security multiverse
deb-src http://mirrors.manchester.m247.com/ubuntu/ trusty-security multiverse

## Uncomment the following two lines to add software from Canonical's
## 'partner' repository.
## This software is not part of Ubuntu, but is offered by Canonical and the
## respective vendors as a service to Ubuntu users.
# deb http://archive.canonical.com/ubuntu trusty partner
# deb-src http://archive.canonical.com/ubuntu trusty partner

## Uncomment the following two lines to add software from Ubuntu's
## 'extras' repository.
## This software is not part of Ubuntu, but is offered by third-party
## developers who want to ship their latest software.
# deb http://extras.ubuntu.com/ubuntu trusty main
# deb-src http://extras.ubuntu.com/ubuntu trusty main
deb http://archive.canonical.com/ trusty partner
# deb-src http://archive.canonical.com/ trusty partner

## Linux Lite Repository
deb http://repo.linuxliteos.com/linuxlite/ beryl main
deb http://repository.spotify.com stable non-free
# deb-src http://repository.spotify.com stable non-free

Hope it helps you solve the mystery. Although, as I say, I'm not experiencing any problems at the moment.

Regards
dby


Re: Firefox 32.0.3 Flash Plugin Vulnerability - altman - 12-19-2014

You can also have latest FF installed with FF s PPA . It s waht I did on my LL 2.2 Beta install , I ll do the same on my latest LL2.2 Finale release  fresh install . I ll do the same with Flash also .

Just a hint in here , do whatever that you want mate . I know Adobe s Flash on Linux does only security updates . It should be as with M$ s .


Re: Firefox 32.0.3 Flash Plugin Vulnerability - dby - 12-20-2014

Thanks for the reply Altman

As I mentioned. I have added the Mozilla ppa and Firefox has now updated without any vulnerability warnings. I pasted the source list at Scott's request, as I think he's curios as the why the normal repositories have not updated my version of Firefox.


Re: Firefox 32.0.3 Flash Plugin Vulnerability - altman - 12-25-2014

(12-20-2014, 04:03 PM)dby link Wrote: Thanks for the reply Altman

As I mentioned. I have added the Mozilla ppa and Firefox has now updated without any vulnerability warnings. I pasted the source list at Scott's request, as I think he's curios as the why the normal repositories have not updated my version of Firefox.

No problem mate .