1184257 - Plugincheck - flash 11.2.202.481 appearing as "up to date" even though it's vulnerable

Status: VERIFIED FIXED

(Plugin Check Graveyard :: UI, defect)

Description

[Kamil Jozwiak [:kjozwiak]]

I agree with Konstantin's comment in bug # 1182751 comment # 44. Currently, 11.2.202.481 appears as "up to date" and the button is "green" although it's vulnerable. This is most likely confusing some of our users that are using linux. Currently firefox is blocking 11.2.202.481 the plugincheck website is stating that everything is up to date and the button is green.

This might be were all the confusion is coming from in bug # 1182751 with linux users.

> Please update the block description
> (https://addons.mozilla.org/en-US/firefox/blocked/p948) to mention that
> while the currently blocked version is vulnerable, no new version is
> available for Linux yet.
> 
> Plugin check page says 11.2.202.481 is up to date and gives it a green thumb
> up -- this is wrong because it sends an inconsistent message to the user!
> If the version is marked as vulnerable, it should not show a green thumbs up
> button. It probably makes sense to elaborate that it is the latest available
> version but is not quite safe to use. Advised user action is to not use
> Flash until a new update comes through.

Comment 1

[Kamil Jozwiak [:kjozwiak]]

Just to add some more context, currently there's no updates available for linux so our plugincheck website assumes that everything is up to date, even though the plugin is being blocked by fx due to being vulnerable.

Comment 2

[Schalk Neethling [:espressive]]

Ok 11.2.202.481 on Linux as now marked as vulnerable, please test and let me know if it works for you.

And according to this page: https://www.adobe.com/software/flash/about/

Linux users should be using v11.2.202.491 for Firefox and Chrome comes bundled with 18.0.0.209

Comment 3

[Schalk Neethling [:espressive]]

I have also added v11.2.202.491 as the latest version for Linux.

Comment 4

[Kamil Jozwiak [:kjozwiak]]

Used the following build for verification's:

- http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2015-07-16-03-02-08-mozilla-central/
- http://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/2015-07-16-00-40-06-mozilla-aurora/
- http://ftp.mozilla.org/pub/mozilla.org/firefox/releases/39.0/linux-x86_64/en-US/

OS used: Ubuntu 14.04.2 x64

Passed on m-c, m-a, m-r without any issues:

* Status: vulnerable 11.2.202.481 (Action: "Update Now" which is appearing as a red button) - PASSED
* Status: Up to Date 11.2.202.491 (Action: "Up to Date" which appears a green thumbs up) - PASSED

Comment 5

[Schalk Neethling [:espressive]]

Thanks Kamil!