1565613 - Plugin Block Request: Adobe Flash Player versions <= 32.0.0.207

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, task)

Description

Extension name	Adobe Flash Player versions <= 32.0.0.207
Extension versions affected	32.0.0.207
Platforms affected	<all platforms>
Block severity	soft

Reason

Adobe released a new Flash Player version (32.0.0.223 on 2019-07-09), so we should now soft-block all previous versions (i.e. versions <= 32.0.0.207).

Extension IDs

Comment 1

[Andreas Wagner [:TheOne] [use NI]]

Chris, should we change these blocks to min and max version of 68?

Comment 2

[Chris Peterson [:cpeterson]]

(In reply to Andreas Wagner [:TheOne] [use NI] from comment #1)

Chris, should we change these blocks to min and max version of 68?

What are the current min and max versions (from plugin block request bug 1559449)?

I don't think we want a min version. We want old Firefox versions (including ESR 60) to block old Flash versions. Users with outdated Firefox version are also likely to have outdated (and vulnerable) Flash versions.

There would be no harm (but also no need to?) setting max version to <= 68 because Firefox 69 will remove the "Always Activate" Flash option (bug 1519434), effectively soft-blocking all Flash versions.

Comment 3

[Andreas Wagner [:TheOne] [use NI]]

There are currently no appversions restrictions set and it seems kinto doesn't even allow this for plugins at the moment. I will update the block as usual then.

Comment 4

[Chris Peterson [:cpeterson]]

(In reply to Andreas Wagner [:TheOne] [use NI] from comment #3)

There are currently no appversions restrictions set and it seems kinto doesn't even allow this for plugins at the moment. I will update the block as usual then.

Thanks. SGTM.

Comment 5

[Andreas Wagner [:TheOne] [use NI]]

The block has been staged. Jorge, can you review and push?

Comment 6

[Jorge Villalobos [:jorgev] (he/him)]

Done.

Comment 7

[Chris Peterson [:cpeterson]]

Thanks for your help, Andreas and Jorge!