1231191 - Plugin block request: Adobe Flash Player 19.0.0.245 , 18.0.0.261 , 11.2.202.548

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[guigs [:guigs] PST (please needinfo me!)]

Plugin name: Adobe Flash Player
Plugin versions to block: 19.0.0.245 , 18.0.0.261 , 11.2.202.548
Applications, versions, and platforms affected: 
Block severity: (hard/soft)

How does this plugin appear in about:plugins?
    File:  /Library/Internet Plug-Ins/Flash Player.plugin
    Version: 
    Description: 

Homepage and other references and contact info: 

Reasons: https://helpx.adobe.com/security/products/flash-player/apsb15-32.html

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

Flash Player Plugin 19.0.0.226 to 19.0.0.245 (click-to-play)
https://addons-dev.allizom.org/firefox/blocked/p797

Flash Player Plugin 18.0.0.255 to 18.0.0.261 (click-to-play)
https://addons-dev.allizom.org/firefox/blocked/p798

Flash Player Plugin on Linux 11.2.202.540 to 11.2.202.548 (click-to-play)
https://addons-dev.allizom.org/firefox/blocked/p799

The blocks are now staged. Kamil, please give them a look. I don't expect us to push them live this week.

Comment 2

[Kamil Jozwiak [:kjozwiak]]

Windows 10 x64 VM:
==================

Using the following build:
- https://archive.mozilla.org/pub/firefox/releases/42.0/win32/en-US/

File: NPSWF32_19_0_0_245.dll
Path: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll
Version: 19.0.0.245
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 19.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 4
--> correctly pointing to p797

Using the following build:
- https://archive.mozilla.org/pub/firefox/nightly/2015/12/2015-12-14-00-40-08-mozilla-aurora/

File: NPSWF32_18_0_0_261.dll
Path: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_261.dll
Version: 18.0.0.261
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 18.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 4
--> correctly pointing to p798

Using the following build:
- https://archive.mozilla.org/pub/firefox/candidates/43.0b9-candidates/build2/

File: NPSWF32_20_0_0_235.dll
Path: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll
Version: 20.0.0.235
State: Enabled
Shockwave Flash 20.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 0

Using the following build:
- https://archive.mozilla.org/pub/firefox/nightly/2015/12/2015-12-14-03-02-20-mozilla-central/

File: NPSWF32_18_0_0_268.dll
Path: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_268.dll
Version: 18.0.0.268
State: Enabled
Shockwave Flash 18.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 0

Ubuntu 14.04.03 x64 VM:
=======================

Using the following build:
- https://archive.mozilla.org/pub/firefox/releases/42.0/linux-x86_64/en-US/
- https://archive.mozilla.org/pub/firefox/nightly/2015/12/2015-12-14-03-02-20-mozilla-central/

File: libflashplayer.so
Path: /usr/lib/mozilla/plugins/libflashplayer.so
Version: 11.2.202.548
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 11.2 r202
--> Blocklist state for Shockwave Flash changed from 0 to 4
--> correctly pointing to p799

Using the following build:
- https://archive.mozilla.org/pub/firefox/candidates/43.0b9-candidates/build2/linux-x86_64/en-US/

File: libflashplayer.so
Path: /usr/lib/mozilla/plugins/libflashplayer.so
Version: 11.2.202.554
State: Enabled
Shockwave Flash 11.2 r202
--> Blocklist state for Shockwave Flash changed from 0 to 0

OSX 10.11.2 x64 VM:
===================

Using the following build:
- https://archive.mozilla.org/pub/firefox/candidates/43.0b9-candidates/build2/mac/en-US/

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 19.0.0.245
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 19.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 4
--> correctly pointing to p797

Using the following build:
- https://archive.mozilla.org/pub/firefox/nightly/2015/12/2015-12-14-03-02-20-mozilla-central/

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 18.0.0.261
State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE)
Shockwave Flash 18.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 4
--> correctly pointing to p798

Using the following build:
- https://archive.mozilla.org/pub/firefox/nightly/2015/12/2015-12-14-00-40-08-mozilla-aurora/

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 20.0.0.235
State: Enabled
Shockwave Flash 20.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 0

Using the following build:
- https://archive.mozilla.org/pub/firefox/releases/43.0/mac/en-US/

File: Flash Player.plugin
Path: /Library/Internet Plug-Ins/Flash Player.plugin
Version: 18.0.0.268
State: Enabled
Shockwave Flash 18.0 r0
--> Blocklist state for Shockwave Flash changed from 0 to 0

Used the following prefs:

- Services.prefs.setCharPref("extensions.blocklist.url", "https://blocklist-dev.allizom.org/blocklist/3/%APP_ID%/%APP_VERSION%/%PRODUCT%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VERSION%/%DISTRIBUTION%/%DISTRIBUTION_VERSION%/%PING_COUNT%/%TOTAL_PING_COUNT%/%DAYS_SINCE_LAST_PING%/");
- Services.prefs.setBoolPref("extensions.logging.enabled", true);

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

The blocks are now live:

Flash Player Plugin on Linux 11.2.202.540 to 11.2.202.548 (click-to-play) 
https://addons.mozilla.org/firefox/blocked/p1065

Flash Player Plugin 18.0.0.255 to 18.0.0.261 (click-to-play)
https://addons.mozilla.org/firefox/blocked/p1066

Flash Player Plugin 19.0.0.226 to 19.0.0.245 (click-to-play)
https://addons.mozilla.org/firefox/blocked/p1067

Comment 4

[[e-mail]]

the block is only an idiot move of this two dudes . funny thing is that new adobe flash 20 link for mozilla is broken and is absolutely hurting and sick to continue on this issue without an option
Just IDIOTS remove this block , you're leaving people just hating mozilla maybe you've been bribed by adobe ? ?

Comment 5

[Loxia]

I have to agree with Croalx. This block is completely useless. Why was this even created to begin with? It's a known fact to anyone tech savvy that Flash and Firefox are often buggy together, but a block isn't necessary.