[Bug 173890] Re: flashplugin-nonfree fails to install... new version?

Oliver Gerlich oliver.gerlich at gmx.de
Thu Feb 21 09:49:50 UTC 2008


Not sure if this is the right place for this comment, but in my opinion
the real problem in this case was that Adobe mixed security fixes and
"major changes" (which made Flash no longer working with existing
software like Konqueror) into a single release.

This is something that can probably only be prevented either by Adobe
offering stable versions for longer time, or by having an open-sourced
alternative like Gnash that allows Ubuntu to maintain stable versions
and manually backport security fixes.

Also, I think that trying to find a way to install old Flash versions is
the wrong solution, because it would deliberatly install software with
known security holes. During the last months,
Ubuntu+Flash+Konqueror/Opera users were probably an easy target for an
attacker: they were all vulnerable and had quite predictable software
environment (read: most likely all users had the same Konqueror/Opera
version and the same libraries installed). So I think the solution that
was used here (to keep back the update) was quite dangerous, and should
not be repeated in the future.

As for Adobes wishlist, maybe it would be more appropriate to ask for
long-supported stable versions with stable interfaces?

-- 
flashplugin-nonfree fails to install... new version?
https://bugs.launchpad.net/bugs/173890
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to flashplugin-nonfree in ubuntu.




More information about the Ubuntu-mozillateam-bugs mailing list