Adobe Flash Player, new versions:19.0.0.207 & ESR 18.0.0.252

[hackerman1]

Adobe Flash Player, new versions for Windows and Linux

More info

Adobe Security Bulletin


Adobe Flash Player, direct-download links

v19.0.0.207

PALE MOON, FIREFOX, OPERA AND OTHER BROWSERS

INTERNET EXPLORER


Extended Support Release (ESR) v18.0.0.252

PALE MOON, FIREFOX, OPERA AND OTHER BROWSERS (ESR)

INTERNET EXPLORER (ESR)


Linux (64-bit)

RPM

TAR.GZ


Linux (32-bit)

RPM

TAR.GZ


Tip: the ESR-version is recommended for Pale Moon.

[hackerman1]

Adobe Security Bulletin

Security Advisory for Adobe Flash Player

Release date: October 14, 2015
Vulnerability identifier: APSA15-05
CVE number: CVE-2015-7645
Platforms: Windows, Macintosh and Linux

Summary

A critical vulnerability (CVE-2015-7645) has been identified in Adobe Flash Player 19.0.0.207 and earlier versions,
for Windows, Macintosh and Linux.
Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.

Adobe is aware of a report that an exploit for this vulnerability is being used in limited, targeted attacks.
Adobe expects to make an update available during the week of October 19.

Affected software versions

Adobe Flash Player 19.0.0.207 and earlier versions for Windows and Macintosh
Adobe Flash Player Extended Support Release version 18.0.0.252 and earlier 18.x versions
Adobe Flash Player 11.2.202.535 and earlier 11.x versions for Linux

https://helpx.adobe.com/security/produc ... 15-05.html

[lunalupus]

How concerned should the average user be about this news?

[hackerman1]

critical vulnerability...
...Successful exploitation could cause a crash and potentially allow an attacker to take control of the affected system.

What do you think, Is it serious enough ?
Should you watch flashvideos...?

[TwoTankAmin]

Adobe may have one of the worst sites I have ever visited when trying to find information about Flash player. they have announced the patches are out for the above issues. But I have now wasted close to 30 minutes trying to get the latest ESR version.

Can anybody please post the url I need to download the newest version because Adobe has not made it easy to find. TY

I just took a shot and used the link from this thread for the .252 version and it downloaded the .255 u[dated version. What is annoying as all get out is when on tries to DL the ESR from the Adobe site, it doesn't give you the exact version you are downloading as far as I could see. So I figured if all i did was download .252 again I was no worse off and then was pleasantly surprised to see it was the new patched version.

The 19.x version in updated form is also avail. At least adobe got the fix out faster than promised.

[hackerman1]

Adobe may have one of the worst sites I have ever visited when trying to find information about Flash player.
But I have now wasted close to 30 minutes trying to get the latest ESR version.
Can anybody please post the url I need to download the newest version because Adobe has not made it easy to find. TY

You have all the links you need in my first post above.
As long as it is the same major version (19) (and 18 for ESR) those links will give you the latest version.
When Adobe have released version 20 (and 19 for ESR) you will have to edit the url and replace 19 with 20 (and 18 with 19).
It has been like that for years....

If you click on the link More info in my first post above, you will see Adobe announcing the release of the new versions.

Edit (2015-10-17): Corrected a typo

[TwoTankAmin]

Here is the problem. The average user like me tends to take a simple and safe route for doing things. From your post I knew how to get the .252 ESR version. When I read that the updates promisd for next week had been finished already and ready for downloading, I wanted to use it.

Not knowing the facts you just explained I tried what most people with common sense might try. I used Google to find out how to DL the new ESR. This was of no help as all it does is put one into an unhelpful loop on the Adobe site. Trying to find it on the Adobe site itself is just as impossible.

When one clicks your provided link to the ESR 18 versions, there is no way to know from what then transpires what version of 18 is being down loaded. Had Adobe been as clear as you have been about how to do these things, it would have saved me a lot of wasted time and effort.

This thread has shown me more about downloading the "proper/desired" version of Flash than Adobe ever has. TY for providing the info.

[ron_1]

TwoTankAmin wrote:
When one clicks your provided link to the ESR 18 versions, there is no way to know from what then transpires what version of 18 is being down loaded. Had Adobe been as clear as you have been about how to do these things, it would have saved me a lot of wasted time and effort.

If you like to see what you're downloading from the Adobe site, this is the link you want to use. It has all current Flash versions listed for Linux, Windows Active X (for IE), Plug-in version (for FF & Pale Moon, etc.), and the ESR version. Of course, as he said hackerman1's direct download links will give you the current version, but as you found out Adobe only uses the main version number (in this case, 18) in the file name. That has always annoyed me about Adobe, but they are not the only ones that do this (the company that makes Wise cleaner doesn't bother to put even the main version number in their executable files).

https://www.adobe.com/products/flashplayer/distribution3.html

[hackerman1]

If you like to see what you're downloading from the Adobe site, this is the link you want to use.
https://www.adobe.com/products/flashplayer/distribution3.html

Take a look at my first post above.

More info

Click on that link....

[ron_1]

hackerman1 wrote:
Click on that link....

Ah, did not notice that.

FTR, Adobe updated Flash again since this thread was started. The current ESR version number is now 18.0.0.255.

[hackerman1]

hackerman1 wrote:
Click on that link....

Ah, did not notice that.

FTR, Adobe updated Flash again since this thread was started. The current ESR version number is now 18.0.0.255.

Yes, as already mentioned by TwoRankAmin above: viewtopic.php?f=47&t=9856#p67710.....

And confirmed by me....

You have all the links you need in my first post above....
....If you click on the link More info in my first post above, you will see Adobe announcing the release of the new versions.

Perhaps you should take a look at previous posts...?

[ron_1]

hackerman1 wrote:
Perhaps you should take a look at previous posts...?

I don't know how that escaped me, seeing that was the whole reason for his post.
I guess I suffer from "reading / thinking too fast" syndrome.

[hackerman1]

Or perhaps you need glasses..

[hackerman1]

Adobe released the awaited update yesterday, addressing the critical vulnerability mentioned in my second post above.

If you click on the link More info in my first post above, you will see Adobe announcing the release of the new versions.

The latest versions
19.0.0.226 (Win and Mac)
ESR 18.0.0.255
11.2.202.540 (Linux)

You have all the links you need in my first post above.
As long as it is the same major version (19) (and 18 for ESR) those links will give you the latest version.
When Adobe have released version 20 (and 19 for ESR) you can still use (almost) the same link,
but you will have to edit the url and replace 19 with 20 (and 18 with 19).
It has been like that for years....

[megaman]

Or perhaps you need glasses..

Okay, this is uncalled for; no amount of emoticons will hide the fact that you are insulting the user. let's be civil.
He admits that he made a mistake, you don't have to keep pushing it.

Your next post is more detailed and civil, so we can continue peacefully.

[LimboSlam]

This is what I've been hearing all this week http://bgr.com/2015/10/15/adobe-flash-player-security-vulnerability-warning/ with blaring titles of "Uninstall now!" and such. So has the vulnerability been patched? I this it??

EDIT: never mind, I see it has.