Security update available for Adobe Flash Player

For discussions about security.
Message
Author
Hogweed
Posts: 96
Joined: Sat 12 Feb 2011, 19:37

#21 Post by Hogweed »

In case anyone is confused there have been several new emergency patch updates to flash and java in the last week or so.

Current Linux Flash Version is 11.2.202.270 Check your version at http://helpx.adobe.com/flash-player/kb/ ... layer.html

Java latest version is Version 7 Update 13 - current version can be checked at http://www.java.com/en/download/install ... detect=jre

There was at least one post to this forum from someone once saying that they had seen a Flash vulnerability used to open a remote terminal window to another IP address with Puppy Linux.

Although relatively unlikely it is definitely possible for Flash vulnerabilities to be used successfully against Puppy variants - especially if specifically targeted as was the case once reported. But its up to you whether you upgrade or not.

With regards to the supposed better performance of 10 series Flash versus 11 Series, I have not noticed this myself on older hardware but your mileage may vary.
Last edited by Hogweed on Fri 15 Feb 2013, 22:36, edited 1 time in total.

User avatar
Makoto
Posts: 1665
Joined: Fri 04 Sep 2009, 01:30
Location: Out wandering... maybe.

#22 Post by Makoto »

Neither of those linked pages worked correctly for me - the first was no longer available, and the Java page, while there, couldn't determine whether or not I had Java installed.

Mozilla's Plugin Check page, however, was able to detect both my Java and Flash versions correctly. So, if you're using a Mozilla-based browser (Seamonkey, Firefox, etc.), you can also use this page to check:
https://www.mozilla.org/en-US/plugincheck/
(just make sure you allow the entire page, if you have NoScript installed)

Edit: I'll have to try the latest version of Flash 11, then. I've been using a version of Flash 10 the past handful of weeks, because 11 started driving my CPU into the stratosphere, for some reason. 10 still does it, but not as much. It all started after I updated Flash 11, not too long ago.
[ Puppy 4.3.1 JP, Frugal install ] * [ XenialPup 7.5, Frugal install ] * [XenialPup 64 7.5, Frugal install] * [ 4GB RAM | 512MB swap ]
In memory of our beloved American Eskimo puppy (1995-2010) and black Lab puppy (1997-2011).

Hogweed
Posts: 96
Joined: Sat 12 Feb 2011, 19:37

#23 Post by Hogweed »

Both these pages are available and work for me right now in Seamonkey 2.15.2 and Firefox 18.0.2 - I did have a typo in the first URL if you read my post immediately after I posted it.

If the Java version check failed then you may have the plugin auto-disabled by recent other browser security updates.

Both the page links I gave are supposed to be correct and current.

User avatar
Makoto
Posts: 1665
Joined: Fri 04 Sep 2009, 01:30
Location: Out wandering... maybe.

#24 Post by Makoto »

Yeah, the first link works, now. Sorry about that. :)

I still get "We are unable to verify if Java is currently installed and enabled in your browser." from the Java page, even though my Java plugin (1.7.0_13) is active and up-to-date, according to Seamonkey's plugin list and the Plugin Check page. (Haven't tried with Firefox, but it should be roughly the same. Edit: Yeah, the exact same behavior in Firefox. :shock: )

I don't know why the Java page wouldn't work (I even fully whitelisted it in NoScript).
[ Puppy 4.3.1 JP, Frugal install ] * [ XenialPup 7.5, Frugal install ] * [XenialPup 64 7.5, Frugal install] * [ 4GB RAM | 512MB swap ]
In memory of our beloved American Eskimo puppy (1995-2010) and black Lab puppy (1997-2011).

User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#25 Post by Semme »

Say Makoto- have you created the necessary symlink? One other page :wink: you can reference.

User avatar
Makoto
Posts: 1665
Joined: Fri 04 Sep 2009, 01:30
Location: Out wandering... maybe.

#26 Post by Makoto »

I only install TheAsterisk!'s SFS versions of the JRE - no idea whether or not it creates that symlink. Wouldn't it have a bearing on the Mozilla Plugin Check page, too, though? (You'd think that if the Mozilla page can find it, the Java page would... :D)
[ Puppy 4.3.1 JP, Frugal install ] * [ XenialPup 7.5, Frugal install ] * [XenialPup 64 7.5, Frugal install] * [ 4GB RAM | 512MB swap ]
In memory of our beloved American Eskimo puppy (1995-2010) and black Lab puppy (1997-2011).

User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#27 Post by Semme »


User avatar
Makoto
Posts: 1665
Joined: Fri 04 Sep 2009, 01:30
Location: Out wandering... maybe.

#28 Post by Makoto »

Edit: Moved? Why? :shock:

For libnpjp2.so? I have at least two links for it - one in ~/.mozilla/plugins, and the other in ~/.usr/lib/mozilla/plugins. Both created on the 4th of this month, which is roughly the time when I upgraded the Java SFS.
(I did a manual search of those directories, not a filesearch, so if any other copies of the symlink are created, I don't know. :) )
[ Puppy 4.3.1 JP, Frugal install ] * [ XenialPup 7.5, Frugal install ] * [XenialPup 64 7.5, Frugal install] * [ 4GB RAM | 512MB swap ]
In memory of our beloved American Eskimo puppy (1995-2010) and black Lab puppy (1997-2011).

User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#29 Post by Semme »


jpeps
Posts: 3179
Joined: Sat 31 May 2008, 19:00

#30 Post by jpeps »

It's interesting that even demo apps utilizing Java Web Start on oracle's site yield "page not found" errors. I think the message is getting quite clear.

User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#31 Post by Semme »


User avatar
canbyte
Posts: 264
Joined: Sat 10 Jan 2009, 20:20
Location: Hamilton, Canada

#32 Post by canbyte »

We would like to open an encrypted email (paystub) but we get the following message and epdfview won't accept the password (works in Windoz). Message:
You now require Adobe Acrobat Reader 9.0 or greater to open your MAILSTUB.PDF attachment
Adobe is upgraded per last post (checked using page https://www.mozilla.org/en-US/plugincheck/ per an earlier suggestion)

The popup says:
Encrpyted Document: This document is encrpyted and can't be accessed. Please enter the document's password.


Which just returns to the same message.

Looks like the problem is with epdfview not Flashplayer????
[color=orange]1. Dell Dimension E521, AMD Athln 64, 2 GHz 1.93GB ram,
Puppy 533 on CD, accesses flash drive only,
FFox Nightly12.0
2. Compaq P3 733Hz 375RAM
Printer: Oki C3400 > LAN [/color]

User avatar
Makoto
Posts: 1665
Joined: Fri 04 Sep 2009, 01:30
Location: Out wandering... maybe.

#33 Post by Makoto »

Most likely nothing to do with Flash, yes.

I'd imagine epdfview is just a 'basic' viewer and probably doesn't have much support for things like encryption. If you're wanting to view PDFs like that, you might have to install Adobe Reader for Linux (assuming it has the necessary features... :oops: (You'd think they would (or should), though).)
[ Puppy 4.3.1 JP, Frugal install ] * [ XenialPup 7.5, Frugal install ] * [XenialPup 64 7.5, Frugal install] * [ 4GB RAM | 512MB swap ]
In memory of our beloved American Eskimo puppy (1995-2010) and black Lab puppy (1997-2011).

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#34 Post by Barkin »

canbyte wrote:... Looks like the problem is with epdfview not Flashplayer????
Adobe flash player is not necessary for Adobe (PDF) reader to function.

Foxit PDF readerworks on Puppy and can display encrypted PDFs, (128-bit encryption, dunno about 256-bit) ...
adobe.com wrote:Compatibility
Sets the type of encryption for opening a password-protected document. If you choose Acrobat 3.0 And Later (PDF 1.3) option, a low-encryption-level security (40-bit RC4) is used. If you choose Acrobat 5.0 And Later (PDF 1.4) or Acrobat 6.0 And Later (PDF 1.5), a high encryption level (128‑bit RC4) is used. Choosing Acrobat 7.0 And Later (PDF 1.6) encrypts the document using the AES encryption algorithm with a 128-bit key size. Acrobat X And Later (PDF 1.7) encrypts the document using 256-bit AES.
http://help.adobe.com/en_US/acrobat/X/p ... 20BB6.html
Attachments
''foxit'' can read 128bit encrypted pdfs.gif
''foxit'' can decrypt 128 bit encrypted pdfs , dunno about 256 bit.
(16.98 KiB) Downloaded 1215 times
''epdfview'' can read 128bit encrypted pdfs.gif
''epdfview'' can decrypt 128 bit encrypted pdfs, dunno about 256 bit.
(17.3 KiB) Downloaded 1785 times

User avatar
canbyte
Posts: 264
Joined: Sat 10 Jan 2009, 20:20
Location: Hamilton, Canada

#35 Post by canbyte »

Thanks Barkin, Makoto for clarifying what's what.

I see the Puppy Package Manager (under 'utility') can install Acrobat Reader 9.3.3, which should meet the above criteria, however, it will occupy too much space on my system (149kb, 28kb left!) The Foxit reader didn't appear to qualify and seemed too complicated (unless there's a .pet) for my noobiness so I'll probably park this project for awhile until I figure out which way to resolve this, but at least I know what has to be done.

Thanks again.
[color=orange]1. Dell Dimension E521, AMD Athln 64, 2 GHz 1.93GB ram,
Puppy 533 on CD, accesses flash drive only,
FFox Nightly12.0
2. Compaq P3 733Hz 375RAM
Printer: Oki C3400 > LAN [/color]

User avatar
Barkin
Posts: 803
Joined: Fri 12 Aug 2011, 04:55

#36 Post by Barkin »

There appear to be online ways to decrypt a pdf with 256-bit encryption ...
Decrypt PDF online wrote:Do not need Adobe Acrobat installed in a computer.
No installation, no registration, its free and easy to use.
Platform independce. No matter which system you use now, Windows XP, Windows 7, Linux, Mac OS X, IOS or Android.
Support up to Adobe Acrobat X, Standard RC4 40-bit, 128-bit, AES128(128-bit AES/AESV2) and AES256(256-bit AES/AESV3) encryption.
http://witwall.com/pdfdecrypt

but having this type of site decrypt your pdf could allow people to read its contents when it was decrypted or when the decrypted version was sent back to you, (via eavesdropping).

User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#37 Post by Semme »


User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#38 Post by Semme »


User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#39 Post by Semme »


User avatar
Semme
Posts: 8399
Joined: Sun 07 Aug 2011, 20:07
Location: World_Hub

#40 Post by Semme »


Post Reply