Package: flashplugin-nonfree
Version: 1:3.6.1+deb8
Severity: grave
Tags: security

Dear Debian Maintainers,

since almost 3 months this package no longer works as expected.
It fails to download the latest hashes from:
https://people.debian.org/~bartm/flashplugin-nonfree/D5C0FC14/
On new installations this package is unfunctional, therefore I marked
this bug "grave".

Most Debian users having it installed are stuck with the terribly
outdated version 24.0.0.186 from December 2016.

Adobe released updated versions on its patchdays in:

January 2017:   24.0.0.194 fixing 13 CVE's
February 2017:  24.0.0.221 fixing 13 CVE's
March 2017:     25.0.0.127 fixing  7 CVE's

I regularly informed the maintainer of this package by mail when new
versions were available, but never got a response. So I suppose that the
assigned e-mail address ist no longer valid.

It appears this package is orphaned and unmaintained leaving severe
security risks, as Adobes CVE's are published meanwhile.

This package by design needs regular maintainence to function.

Reply via email to