Bug#752277: flashplugin-nonfree: several security issues

2014-06-23 Thread Christoph Anton Mitterer
On Mon, 2014-06-23 at 16:19 +, Bart Martens wrote: > > Anything else that I forgot now? > Not that I know of. Ah one more thing that I've remembered: Do you extract the downloaded archive in such way that any leading / in the pathnames is ignored? And apart from that... as mentioned before

Bug#752277: flashplugin-nonfree: several security issues

2014-06-23 Thread Christoph Anton Mitterer
On Mon, 2014-06-23 at 16:19 +, Bart Martens wrote: > OK, your answer confirms that I wasn't overlooking anything. I'll also briefly > answer your questions : Well as said... I think the problem that people don't notice updates unless they run the installer again, is also some severe problem...

Bug#752277: [Secure-testing-team] Bug#752277: flashplugin-nonfree: several security issues

2014-06-21 Thread Michael Gilbert
control: severity -1 important control: tag -1 -security control: retitle -1 suggestions for flashplugin fetching improvements Contrib doesn't get any security support. Users worried about security should avoid contrib and non-free. Best wishes, Mike -- To UNSUBSCRIBE, email to debian-bugs-rc

Processed: Re: [Secure-testing-team] Bug#752277: flashplugin-nonfree: several security issues

2014-06-21 Thread Debian Bug Tracking System
Processing control commands: > severity -1 important Bug #752277 [flashplugin-nonfree] flashplugin-nonfree: several security issues Severity set to 'important' from 'critical' > tag -1 -security Bug #752277 [flashplugin-nonfree] flashplugin-nonfree: several security issues Removed tag(s) security.

Bug#752277: flashplugin-nonfree: several security issues

2014-06-21 Thread Christoph Anton Mitterer
Package: flashplugin-nonfree Version: 1:3.4 Severity: critical Tags: security Justification: root security hole Hi. This is basically a follow up from the lengthy discussion at debian-devel: https://lists.debian.org/debian-devel/2014/06/msg00171.html (somewhere deeper in the thread). I've hea