Flash Emergency-update..once again

[francois]

I have my episodes of alien bob blog reading.

I value very much his work and devotion to slackware and linux.

[donald]

11.2.202.577 is (again) unsafe....who would have thought?..lol
https://helpx.adobe.com/security/produc ... 16-10.html
new version 11.2.202.616 (Linux)

[Bogomips]

usm still on 577. Verified alien still on 577.

[Ed_P]

This works.

Code: Select all

#!/bin/sh
# http://forum.porteus.org/viewtopic.php?f=53&t=4840&p=35284#p35280

ALIEN=http://www.slackware.com/~alien/slackbuilds/flashplayer-plugin/build
ARCH=i386
if [ `echo $MACHTYPE | sed -e 's/-.*$//'` = x86_64 ]; then
   ARCH=x86_64
fi

FPVERSION=616

if [ `whoami` != "root" ]; then
  echo "Module unavailable via USM?"
  echo -en "Press Enter to download vrsn $FPVERSION, Ctrl+C to end.\n"
  read answer
fi

if [ `whoami` != "root" ]; then
  ktsuss "$0 $1"
  exit
fi

if [ -d  "/home/guest/Downloads/flashplayer-plugin/" ]; then
   rm /home/guest/Downloads/flashplayer-plugin/*
fi
wget $ALIEN/flashplayer-plugin.SlackBuild                           -P /home/guest/Downloads/flashplayer-plugin
wget $ALIEN/install_flash_player_11.2.202.$FPVERSION_linux_$ARCH.gz -P /home/guest/Downloads/flashplayer-plugin
wget $ALIEN/slack-desc                                              -P /home/guest/Downloads/flashplayer-plugin

cd   /home/guest/Downloads/flashplayer-plugin

chmod +x flashplayer-plugin.SlackBuild
./flashplayer-plugin.SlackBuild

txz2xzm /tmp/*.txz

echo
echo Done

This works.

Actually NO. It creates a 491 flashplayer module!!

-edit-

My error. Fixed script.

[Ed_P]

FWIW USM has the 616 alien module except it errors out with the LIBS.TXT file is missing.

[Slaxmax]

Guys, flashplayer 11 is died.
Why not use pepperflash?
Pepperflash is updated contains many improvements and works on all flash pages.
Plugins NPAPI (example flash 11) on borrowed time.

See this page
only Chrome and Chromium have latest flashplayer version in linux (PAPPI).
http://www.adobe.com/software/flash/about/

Edit:
more information end of life (NPAPI)
https://blog.mozilla.org/futurereleases ... n-firefox/

[Blaze]

Better use for this small GUI script - Adobe Flash Player Auto Updater

• for x86 update_flash-1.4-x86.xzm.
• for X86_64 update_flash-1.4_x86_64.xzm

For newbies it's simple and does not need to know USM commands. No dependencies from the Slackware packages.
The most recent update of Adobe Flash Player in your box. Plus you can choose manual or auto update Adobe Flash Player.

Thanks to Geoffrey

[donald]

Another day, another Flash exploit.

https://helpx.adobe.com/security/produc ... 16-02.html

http://securityaffairs.co/wordpress/471 ... -zero.html

[Evan]

<removed>

[Ed_P]

Better use for this small GUI script - Adobe Flash Player Auto Updater

• for x86 update_flash-1.4-x86.xzm.
• for X86_64 update_flash-1.4_x86_64.xzm

.

Wow!!

Beware of the Open Software Updater window that pops up and tries to get you to download their ISP & browser updates when you try these links using Windows.

[brokenman]

On Porteus-v3.2 just open a root console and type: update-flash

[Rava]

[quote="bour59"]slackware-current (latest)
get from /extra/flashplayer-plugin/flashplayer-plugin.Slackbuilds

Code: Select all

# Determine the latest version by checking the web page:
VERSION=${VERSION:-"$(wget -O - http://www.adobe.com/software/flash/about/ 2>/dev/null | sed -n "/Firefox - NPAPI/{N;p}" | tr -d ' '| tail -1 | tr '<>' '  ' | cut -f3 -d ' ')"}

The code seems no longer to be working as it should (for me, see below), when downloading manually via wget -O - http://www.adobe.com/software/flash/about/ >/tmp/adobeflashabout and checking with file /tmp/adobeflashabout, I get this:

Code: Select all

/tmp/adobeflashabout: gzip compressed data, from Unix

To get the info I wanted I renamed and decompressed /tmp/adobeflashabout like so:

Code: Select all

cat abobeflashabout.html | sed -n "/Firefox - NPAPI/{N;p}" | tr -d ' '| tail -1 | tr '<>' '  ' | cut -f3 -d ' '
11.2.202.635

Does the code as above still work okay for you guys?

Me things it could be a local setup issue, since I use a setup that disguises my wget as being a Firefox browser, and browsers handle gzipped webpages all the fime, but in instances like this it seems my trick kicked me in my butt instead...

Any idea of how to setup procedure that still enables scripts to work as they should, even when someone setup a setup like me, disguising wget as a browser?

[Ed_P]

This seems to be working for me.

Porteus 3.2rc5 Cinnamon 64-bit Firefox 48.0b6

Code: Select all

guest@porteus:~$ ./flashplayer-version-ck.sh
Latest version = 11.2.202.635
Using version =  22.0.0.209-x86_64-1.xzm
guest@porteus:~$ 

flashplayer-version-ck.sh

Code: Select all

# http://forum.porteus.org/viewtopic.php?f=48&t=5627&p=43636#p43406

# Determine the latest version by checking the web page:
VERSION=${VERSION:-"$(wget -O - http://www.adobe.com/software/flash/about/ 2>/dev/null | sed -n "/Firefox - NPAPI/{N;p}" | tr -d ' '| tail -1 | tr '<>' '  ' | cut -f3 -d ' ')"}
echo "Latest version = "$VERSION
LIVE=`grep "flashplayer" /var/log/porteus-livedbg|tail -n1|sed 's^//^/^g'`
LIVE=${LIVE:48}
#LIVE=${LIVE:-20:10}
echo "Using version = " $LIVE

[Rava]

Ed_P, could you do me a favour and manually download the file with wget (best tell it in wich file it should out it, since it might creating sub-folders in that case, I used -O to be sure), then check it with file [filename]. I am sure since you used a non tweaked wget setup, it downloads it as plain html, but I am not 100% sure, so, could you check that for me.

I try to disable my setup and give you the heads up.

[Rava]

And here the heads up: this is my ~/wgetrc :

Code: Select all

###
### Sample Wget initialization file .wgetrc by http://www.askapache.com
###
##
## Local settings (for a user to set in his $HOME/.wgetrc).  It is
## *highly* undesirable to put these settings in the global file, since
## they are potentially dangerous to "normal" users.
##
## Even when setting up your own ~/.wgetrc, you should know what you
## are doing before doing so.
##

header = Accept-Language: en-us,en;q=0.5
header = Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
header = Accept-Encoding: gzip,deflate
header = Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 
header = Keep-Alive: 300
user_agent = Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6
referer = http://www.google.com

Can be used when you want some more automated downloads for sites that reject these, or even some sites reject even a single wget download...

When disabling this setup, wget downloads the html as plain html, not as gzipped html, so kinda: case solved. But the issue remains: what can a script coder do when using wget to check things like this and a .wgetrc messes that up?