%ifarch x86_64 %define bitmark ()(64bit) %else %define bitmark %nil %endif %define hal_flash_snap 20130530 %define flash_libdir %{_libdir}/%{name} # Internal dependencies (Anssi 04/2014) %global common_exceptions ^libflashplayer\\.so.*$|^libhal\\.so.*$|^lib_plugin.so %global __requires_exclude %common_exceptions %global __provides_exclude %common_exceptions Summary: Flash Player plugin for browsers Name: flash-player-plugin Version: 11.2.202.508 Release: %mkrel 1 License: Proprietary URL: http://www.adobe.com/products/flashplayer/ Group: Networking/WWW ExclusiveArch: %ix86 x86_64 BuildRequires: dbus-devel Requires(pre): curl # http://github.com/cshorler/hal-flash Source1: hal-flash-%hal_flash_snap.tar.xz # helper for getting requires: # for i in $(objdump -p libflashplayer.so | grep NEEDED | awk '{ print $2 }' | grep -v ld-linux); do echo "Requires: $i%{bitmark}"; done Requires: libatk-1.0.so.0%{bitmark} Requires: libcairo.so.2%{bitmark} Requires: libc.so.6%{bitmark} Requires: libdl.so.2%{bitmark} Requires: libfontconfig.so.1%{bitmark} Requires: libfreetype.so.6%{bitmark} Requires: libgdk_pixbuf-2.0.so.0%{bitmark} Requires: libgdk-x11-2.0.so.0%{bitmark} Requires: libglib-2.0.so.0%{bitmark} Requires: libgmodule-2.0.so.0%{bitmark} Requires: libgobject-2.0.so.0%{bitmark} Requires: libgthread-2.0.so.0%{bitmark} Requires: libgtk-x11-2.0.so.0%{bitmark} Requires: libm.so.6%{bitmark} Requires: libnspr4.so%{bitmark} Requires: libnss3.so%{bitmark} Requires: libnssutil3.so%{bitmark} Requires: libpango-1.0.so.0%{bitmark} Requires: libpangocairo-1.0.so.0%{bitmark} Requires: libpangoft2-1.0.so.0%{bitmark} Requires: libplc4.so%{bitmark} Requires: libplds4.so%{bitmark} Requires: libpthread.so.0%{bitmark} Requires: librt.so.1%{bitmark} Requires: libsmime3.so%{bitmark} Requires: libssl3.so%{bitmark} Requires: libX11.so.6%{bitmark} Requires: libXcursor.so.1%{bitmark} Requires: libXext.so.6%{bitmark} Requires: libXrender.so.1%{bitmark} Requires: libXt.so.6%{bitmark} # end of helper produced requires # required for audio, dlopened: Requires: libasound.so.2%{bitmark} # dlopened: Requires: libcurl.so.4%{bitmark} # required for content protection by libadobecp.so Requires: libdbus-1.so.3%{bitmark} # dlopened, for video acceleration: Recommends: libvdpau.so.1%{bitmark} # Conflicts: FlashPlayer < 9.0.115.0-5 Conflicts: flash-plugin FlashPlayer-plugin flashplayer-plugin # Conflict with free plugins to avoid user confusion as to which one is # actually used: Conflicts: gnash-firefox-plugin Conflicts: swfdec-mozilla Conflicts: lightspark-mozilla-plugin Conflicts: libflashsupport < 0.20080000.1 Obsoletes: flash-player-plugin10.2 < 10.2.152 Provides: flash-player-plugin11 Obsoletes: flash-player-plugin11 BuildRequires: kde4-macros BuildRoot: %{_tmppath}/%{name}-root %description Adobe Flash Player plugin for browsers. NOTE: This package does not contain the Flash Player itself. The software will be automatically downloaded from Adobe during package installation. Installing this package indicates acceptance of the Flash Player EULA, available at http://www.adobe.com/products/eulas/players/flash/ %ifnarch x86_64 and as %{_libdir}/mozilla/plugins/LICENSE.flashplayer. %endif # It would be preferable to have the KCM module in the main package with # simply not requiring any kde stuff. However, standard KDE installation # doesn't necessary include libkutils4. - Anssi 08/2011 %package kde Summary: Flash Player KDE settings module Group: Networking/WWW Requires: %{name} = %{version}-%{release} Requires(post): %{name} = %{version}-%{release} # helper for getting requires: # for i in $(objdump -p kcm_adobe_flash_player.so | grep NEEDED | awk '{ print $2 }' | grep -v ld-linux); do echo "Requires: $i%{bitmark}"; done Requires: libc.so.6%{bitmark} Requires: libICE.so.6%{bitmark} Requires: libkdecore.so.5%{bitmark} Requires: libkdeui.so.5%{bitmark} Requires: libkutils.so.4%{bitmark} Requires: libm.so.6%{bitmark} Requires: libpthread.so.0%{bitmark} Requires: libQtCore.so.4%{bitmark} Requires: libQtDBus.so.4%{bitmark} Requires: libQtGui.so.4%{bitmark} Requires: libQtSvg.so.4%{bitmark} Requires: libSM.so.6%{bitmark} Requires: libX11.so.6%{bitmark} Requires: libXau.so.6%{bitmark} Requires: libXdmcp.so.6%{bitmark} Requires: libXext.so.6%{bitmark} Requires: libXft.so.2%{bitmark} Requires: libXpm.so.4%{bitmark} # end of helper produced requires Conflicts: flash-player-plugin < 10.3.183.5 Provides: flash-player-plugin11-kde Obsoletes: flash-player-plugin11-kde %description kde KDE settings module for Adobe Flash Player. NOTE: This package does not contain the software itself. The software will be automatically downloaded from the Adobe server during package installation. Installing this package indicates acceptance of the Flash Player EULA, available at http://www.adobe.com/products/eulas/players/flash/ %ifnarch x86_64 and in %{flash_libdir}/LICENSE.flashplayer. %endif %prep %setup -q -c -T -a1 # Always prefer versioned archives instead of unversioned ones, so that when # Adobe updates the Flash Player, the old sha256sum continues to work until # this package is updated for the new version. # The linuxdownload.adobe.com rpm usually stays up longer, but fpdownload.macromedia.com is faster. # Their sha256sums usually differ. %ifarch %ix86 %define downurl1 http://fpdownload.macromedia.com/get/flashplayer/pdc/%{version}/flash-plugin-%{version}-release.i386.rpm # (Anssi) this was up faster (i.e. at the time of writing it was up but downurl1 was not), but does not stay up very long, same sha256 as url1: %define downurl2 http://fpdownload.macromedia.com/get/flashplayer/current/licensing/linux/flash-plugin-%{version}-release.i386.rpm # can be temporarily disabled by %nilling if not yet available at the time of updating: #define downurl3 http://linuxdownload.adobe.com/linux/i386/flash-plugin-%{version}-release.i386.rpm %define downurl3 %nil %define downurl4 %nil # sha256sum:filesize %define tsha256sum1 86e2f0499118c2f30966c5832d9cafe77e912108b86d89d24081d0ff8d03bd16:6930758 %define tsha256sum2 %nil %define tsha256sum3 %nil %define tarname flash-plugin-%{version}-release.i386.rpm %define warn_on_missing_files 1 %endif %ifarch x86_64 %define downurl1 http://fpdownload.macromedia.com/get/flashplayer/pdc/%{version}/flash-plugin-%{version}-release.x86_64.rpm %define downurl2 http://fpdownload.macromedia.com/get/flashplayer/current/licensing/linux/flash-plugin-%{version}-release.x86_64.rpm #define downurl3 http://linuxdownload.adobe.com/linux/x86_64/flash-plugin-%{version}-release.x86_64.rpm %define downurl3 %nil %define downurl4 %nil %define tsha256sum1 62db3c984e48810a6b53552088b5b6d6673c6a98b5aa4d2277909f293beeab2e:7248161 %define tsha256sum2 %nil %define dsha256sum3 %nil %define tarname flash-plugin-%{version}-release.x86_64.rpm %define warn_on_missing_files 1 %endif %define file %{_localstatedir}/lib/%{name}/%{tarname} cat > README.%_real_vendor <<EOF This package does not contain the Flash Player itself. The software is automatically downloaded from Adobe during package installation. This package uses a wrapper in %{_libdir}/mozilla/plugins/libflashplayer.so which loads the real Flash Player from %{flash_libdir}/libflashplayer.so, while also loading the HAL-UDisks wrapper "hal-flash" by Chris Horler (https://github.com/cshorler/hal-flash) which is required to satisfy the HAL dependency of Flash Player for protected content playback. EOF cp -a hal-flash-%hal_flash_snap/COPYING COPYING.hal-flash %build cd hal-flash-%hal_flash_snap autoreconf -fi %configure2_5x %make cd - # we want the dummy dependencies (Anssi 03/2014) %define _disable_ld_as_needed 1 # Create a wrapper plugin that loads both the real Flash Player and the wrapper libhal.so.1 # (Anssi 03/2014) echo | gcc %{optflags} %{ldflags} -Wall -fPIC -shared -o libflashsoname.so -x c - -Wl,-soname,libflashplayer.so echo | gcc %{optflags} %{ldflags} -Wall -fPIC -shared -o libflashwrap.so -x c - -Wl,-soname,lib_plugin.so \ -Wl,-rpath,%{flash_libdir} -x none \ libflashsoname.so hal-flash-%hal_flash_snap/src/.libs/libhal.so %install rm -rf %{buildroot} install -d -m755 %{buildroot}%{_localstatedir}/lib/%{name} install -d -m755 %{buildroot}%{flash_libdir} install -d -m755 %{buildroot}%{_libdir}/mozilla/plugins install -m755 libflashwrap.so %{buildroot}%{_libdir}/mozilla/plugins/libflashplayer.so install -m755 hal-flash-%hal_flash_snap/src/.libs/libhal.so.1 %{buildroot}%{flash_libdir}/ touch %{buildroot}%{flash_libdir}/libflashplayer.so touch %{buildroot}%{flash_libdir}/LICENSE.flashplayer touch %{buildroot}%{flash_libdir}/README.flashplayer touch %{buildroot}%{_localstatedir}/lib/%{name}/%{tarname} install -d -m755 %{buildroot}%{_bindir} touch %{buildroot}%{_bindir}/flash-player-properties install -d -m755 %{buildroot}%{_kde_services} touch %{buildroot}%{_kde_services}/kcm_adobe_flash_player.desktop install -d -m755 %{buildroot}%{_kde_libdir}/kde4 touch %{buildroot}%{_kde_libdir}/kde4/kcm_adobe_flash_player.so install -d -m755 %{buildroot}%{_datadir}/applications touch %{buildroot}%{_datadir}/applications/flash-player-properties.desktop for i in 16 22 24 32 48; do install -d -m755 %{buildroot}%{_iconsdir}/hicolor/${i}x${i}/apps touch %{buildroot}%{_iconsdir}/hicolor/${i}x${i}/apps/flash-player-properties.png done install -d -m755 %{buildroot}%{_datadir}/%{name} cat > %{buildroot}%{_datadir}/%{name}/functions << EOF next_file() { FILENUM=\$((FILENUM+1)) eval FILE_SRC="\\\$FILE\${FILENUM}_SRC" eval FILE_DST="\\\$FILE\${FILENUM}_DST" eval FILE_PRM="\\\$FILE\${FILENUM}_PRM" [ -n "\$FILE_SRC" ] } tar_extract() { extractdir=\$(mktemp -d --tmpdir=/tmp) if [ -z "\$extractdir" ]; then echo "Error during extraction." >&2 exit 1 fi cd "\$extractdir" || exit 1 if [ "\$(head -c4 "%file")" = \$'\\xED\\xAB\\xEE\\xDB' ]; then rpm2cpio "%file" | cpio -i --quiet -d -R root:root else tar -xzf "%file" --no-same-owner --no-same-permissions fi # Avoid leaving old files in case of failure below FILENUM=0 while next_file; do rm -f "\$FILE_DST" done FILENUM=0 while next_file; do if [ ! -f "\$FILE_SRC" ]; then %if %warn_on_missing_files echo "Warning: \$FILE_SRC not found in the Flash Player archive," >&2 echo " skipping installation of \$FILE_DST." >&2 echo " Please file a bug report at https://bugs.mageia.org/ ." >&2 %endif continue fi chmod "\$FILE_PRM" "\$FILE_SRC" mv -f "\$FILE_SRC" "\$FILE_DST" done rm -rf "\$extractdir" } EOF %clean rm -rf %{buildroot} %pre checksha256sum() { [ -e "$1" ] || return 1 FILESHA256="$(sha256sum $1 | cut -d" " -f1)" FILESIZE="$(stat -c%%s "$1")" [ -n "$FILESHA256" ] || return 1 [ -n "$FILESIZE" ] || return 1 SHA256NUM=1 eval SHA256SUM="\$SHA256SUM$SHA256NUM" while [ "$SHA256SUM" ]; do [ "${SHA256SUM%:*}" = "$FILESHA256" ] && [ "${SHA256SUM#*:}" = "$FILESIZE" ] && return 0 SHA256NUM=$((SHA256NUM+1)) eval SHA256SUM="\$SHA256SUM$SHA256NUM" done return 1 } get_proxy_from_urpmi() { if [ -e /etc/urpmi/proxy.cfg ]; then proxy="$(grep ^http_proxy= /etc/urpmi/proxy.cfg 2>/dev/null)" proxy_user="$(grep ^proxy_user= /etc/urpmi/proxy.cfg 2>/dev/null)" proxy="${proxy#http_proxy=}" proxy_user="${proxy_user#proxy_user=}" [ -n "$proxy" ] && echo "--proxy $proxy" [ -n "$proxy_user" ] && echo "--proxy-user $proxy_user" fi } SHA256SUM1="%{tsha256sum1}" SHA256SUM2="%{tsha256sum2}" SHA256SUM3="%{tsha256sum3}" SHA256SUM4= URL1="%{downurl1}" URL2="%{downurl2}" URL3="%{downurl3}" URL4= URLNUM=1 install -d -m 0755 %{_localstatedir}/lib/%{name} echo "Note that by downloading the Adobe Flash Player you indicate your acceptance of" echo "the EULA, available at http://www.adobe.com/products/eulas/players/flash/" while ! checksha256sum "%file"; do eval URL="\$URL$URLNUM" if [ -z "$URL" ]; then echo "Error: Unable to download Flash Player. This is likely due to this package" >&2 echo " being too old. Please file a bug report at https://bugs.mageia.org" >&2 echo " so that the package gets updated. Thank you." >&2 echo "" >&2 echo " In the meantime, you can download Flash Player manually from" >&2 echo " http://get.adobe.com/flashplayer/" >&2 rm -f "%file" [ "$(ls -A "%{_localstatedir}/lib/%{name}")" ] && rm -rf "%{_localstatedir}/lib/%{name}" exit 1 fi URLNUM=$((URLNUM+1)) echo "Downloading from $URL:" curl --connect-timeout 20 -m 10800 -L $(get_proxy_from_urpmi) "$URL" > "%file" done %post FILE1_SRC="usr/%{_lib}/flash-plugin/libflashplayer.so" FILE1_DST="%{flash_libdir}/libflashplayer.so" FILE1_PRM="0755" FILE2_SRC="usr/%{_lib}/flash-plugin/LICENSE" FILE2_DST="%{flash_libdir}/LICENSE.flashplayer" FILE2_PRM="0644" FILE3_SRC="usr/%{_lib}/flash-plugin/README" FILE3_DST="%{flash_libdir}/README.flashplayer" FILE3_PRM="0644" FILE4_SRC="usr/bin/flash-player-properties" FILE4_DST="%{_bindir}/flash-player-properties" FILE4_PRM="0755" FILE5_SRC="usr/share/applications/flash-player-properties.desktop" FILE5_DST="%{_datadir}/applications/flash-player-properties.desktop" FILE5_PRM="0644" FILE6_SRC="usr/share/icons/hicolor/16x16/apps/flash-player-properties.png" FILE6_DST="%{_iconsdir}/hicolor/16x16/apps/flash-player-properties.png" FILE6_PRM="0644" FILE7_SRC="usr/share/icons/hicolor/22x22/apps/flash-player-properties.png" FILE7_DST="%{_iconsdir}/hicolor/22x22/apps/flash-player-properties.png" FILE7_PRM="0644" FILE8_SRC="usr/share/icons/hicolor/24x24/apps/flash-player-properties.png" FILE8_DST="%{_iconsdir}/hicolor/24x24/apps/flash-player-properties.png" FILE8_PRM="0644" FILE9_SRC="usr/share/icons/hicolor/32x32/apps/flash-player-properties.png" FILE9_DST="%{_iconsdir}/hicolor/32x32/apps/flash-player-properties.png" FILE9_PRM="0644" FILE10_SRC="usr/share/icons/hicolor/48x48/apps/flash-player-properties.png" FILE10_DST="%{_iconsdir}/hicolor/48x48/apps/flash-player-properties.png" FILE10_PRM="0644" FILE11_SRC= . %{_datadir}/%{name}/functions tar_extract # show in KDE as well (in case user doesn't have -kde subpkg sed -i 's,NotShowIn=KDE;,,' %{_datadir}/applications/flash-player-properties.desktop 2>/dev/null || : # otherwise KDE hides it: sed -i 's,GNOME;,,' %{_datadir}/applications/flash-player-properties.desktop 2>/dev/null || : echo "Adobe Flash Player installation successful." %pre kde # When installing both main package and -kde, failure of %pre of main package # can prevent installation of it, but urpmi/rpm will try to install -kde # regardless. FIXME. # For now, workaround it by preventing -kde installation as well: [ -e %{_datadir}/%{name}/functions ] && [ -e %{_localstatedir}/lib/%{name}/%{tarname} ] %post kde FILE1_SRC="usr/%{_lib}/kde4/kcm_adobe_flash_player.so" FILE1_DST="%{_kde_libdir}/kde4/kcm_adobe_flash_player.so" FILE1_PRM="0755" FILE2_SRC="usr/share/kde4/services/kcm_adobe_flash_player.desktop" FILE2_DST="%{_kde_services}/kcm_adobe_flash_player.desktop" FILE2_PRM="0644" FILE3_SRC= . %{_datadir}/%{name}/functions tar_extract sed -i 's,=personal,=network-and-connectivity,' %{_kde_services}/kcm_adobe_flash_player.desktop 2>/dev/null || : %files %doc README.%_real_vendor %doc COPYING.hal-flash %dir %{_localstatedir}/lib/%{name} %ghost %{_localstatedir}/lib/%{name}/%{tarname} %dir %{_datadir}/%{name} %{_datadir}/%{name}/functions %dir %{_libdir}/mozilla %dir %{_libdir}/mozilla/plugins %{_libdir}/mozilla/plugins/libflashplayer.so %dir %{flash_libdir} %{flash_libdir}/libhal.so.1 %ghost %{flash_libdir}/libflashplayer.so %ghost %{flash_libdir}/LICENSE.flashplayer %ghost %{flash_libdir}/README.flashplayer %ghost %{_bindir}/flash-player-properties %ghost %{_datadir}/applications/flash-player-properties.desktop %ghost %{_iconsdir}/hicolor/*/apps/flash-player-properties.png %files kde %defattr(-,root,root) %ghost %{_kde_libdir}/kde4/kcm_adobe_flash_player.so %ghost %{_kde_services}/kcm_adobe_flash_player.desktop %changelog * Tue Aug 11 2015 anssi <anssi> 11.2.202.508-1.mga5 + Revision: 863036 - new version 11.2.202.508 o fixes CVE-2015-3107, CVE-2015-5124, CVE-2015-5125, CVE-2015-5127, CVE-2015-5128, CVE-2015-5129, CVE-2015-5130, CVE-2015-5131, CVE-2015-5132, CVE-2015-5133, CVE-2015-5134, CVE-2015-5539, CVE-2015-5540, CVE-2015-5541, CVE-2015-5544, CVE-2015-5545, CVE-2015-5546, CVE-2015-5547, CVE-2015-5548, CVE-2015-5549, CVE-2015-5550, CVE-2015-5551, CVE-2015-5552, CVE-2015-5553, CVE-2015-5554, CVE-2015-5555, CVE-2015-5556, CVE-2015-5557, CVE-2015-5558, CVE-2015-5559, CVE-2015-5560, CVE-2015-5561, CVE-2015-5562, CVE-2015-5563 ( https://helpx.adobe.com/security/products/flash-player/apsb15-19.html ) * Thu Jul 16 2015 anssi <anssi> 11.2.202.491-1.mga5.nonfree + Revision: 854611 - new version 11.2.202.491 o fixes CVE-2015-5122, CVE-2015-5123 ( https://helpx.adobe.com/security/products/flash-player/apsb15-18.html ) * Wed Jul 08 2015 anssi <anssi> 11.2.202.481-1.mga5.nonfree + Revision: 852821 - new version 11.2.202.481 o fixes CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122, CVE-2015-3123, CVE-2015-3124, CVE-2015-3125, CVE-2015-3126, CVE-2015-3127, CVE-2015-3128, CVE-2015-3129, CVE-2015-3130, CVE-2015-3131, CVE-2015-3132, CVE-2015-3133, CVE-2015-3134, CVE-2015-3135, CVE-2015-3136, CVE-2015-3137, CVE-2015-4428, CVE-2015-4429, CVE-2015-4430, CVE-2015-4431, CVE-2015-4432, CVE-2015-4433, CVE-2015-5116, CVE-2015-5117, CVE-2015-5118, CVE-2015-5119 ( https://helpx.adobe.com/security/products/flash-player/apsb15-16.html ) * Tue Jun 23 2015 anssi <anssi> 11.2.202.468-1.mga5.nonfree + Revision: 841530 - new version 11.2.202.468 o fixes CVE-2015-3113 (actively being exploited) ( https://helpx.adobe.com/security/products/flash-player/apsb15-14.html ) * Sat Jun 20 2015 anssi <anssi> 11.2.202.466-1.mga5.nonfree + Revision: 835795 - new version 11.2.202.466 o fixes CVE-2015-3096, CVE-2015-3098, CVE-2015-3099, CVE-2015-3100, CVE-2015-3101, CVE-2015-3102, CVE-2015-3103, CVE-2015-3104, CVE-2015-3105, CVE-2015-3106, CVE-2015-3107, CVE-2015-3108 ( https://helpx.adobe.com/security/products/flash-player/apsb15-11.html ) * Tue May 12 2015 anssi <anssi> 11.2.202.460-1.mga5.nonfree + Revision: 821941 - new version 11.2.202.460 o fixes CVE-2015-3044, CVE-2015-3077, CVE-2015-3078, CVE-2015-3079, CVE-2015-3080, CVE-2015-3081, CVE-2015-3082, CVE-2015-3083, CVE-2015-3084, CVE-2015-3085, CVE-2015-3086, CVE-2015-3087, CVE-2015-3088, CVE-2015-3089, CVE-2015-3090, CVE-2015-3091, CVE-2015-3092, CVE-2015-3093 ( https://helpx.adobe.com/security/products/flash-player/apsb15-09.html ) * Tue Apr 14 2015 anssi <anssi> 11.2.202.457-1.mga5.nonfree + Revision: 820209 - new version 11.2.202.457 o fixes CVE-2015-0346, CVE-2015-0347, CVE-2015-0348, CVE-2015-0349, CVE-2015-0350, CVE-2015-0351, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0356, CVE-2015-0357, CVE-2015-0358, CVE-2015-0359, CVE-2015-0360, CVE-2015-3038, CVE-2015-3039, CVE-2015-3040, CVE-2015-3041, CVE-2015-3042, CVE-2015-3043, CVE-2015-3044 ( https://helpx.adobe.com/security/products/flash-player/apsb15-06.html ) * Thu Mar 12 2015 anssi <anssi> 11.2.202.451-1.mga5.nonfree + Revision: 818459 - new version 11.2.202.451 o fixes CVE-2015-0332, CVE-2015-0333, CVE-2015-0334, CVE-2015-0335, CVE-2015-0336, CVE-2015-0337, CVE-2015-0338, CVE-2015-0339, CVE-2015-0340, CVE-2015-0341, CVE-2015-0342 ( https://helpx.adobe.com/security/products/flash-player/apsb15-05.html ) - use sha256sum+size instead of md5sum for download verification (mgabz #15229) * Thu Feb 05 2015 anssi <anssi> 11.2.202.442-1.mga5.nonfree + Revision: 813559 - new version 11.2.202.442 o fixes CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323, CVE-2015-0324, CVE-2015-0325, CVE-2015-0326, CVE-2015-0327, CVE-2015-0328, CVE-2015-0329, CVE-2015-0330 ( https://helpx.adobe.com/security/products/flash-player/apsb15-04.html ) * Mon Jan 26 2015 anssi <anssi> 11.2.202.440-2.mga5.nonfree + Revision: 812385 - fix missing download URLs - new version 11.2.202.440 o fixes CVE-2015-0311 o http://helpx.adobe.com/security/products/flash-player/apsa15-01.html - new version 11.2.202.438 o fixes CVE-2015-0310 (memleak with zero or limited security impact on Linux platform according to Adobe) o http://helpx.adobe.com/security/products/flash-player/apsb15-02.html * Tue Jan 13 2015 anssi <anssi> 11.2.202.429-1.mga5.nonfree + Revision: 810431 - new version 11.2.202.429 o fixes CVE-2015-0301, CVE-2015-0302, CVE-2015-0303, CVE-2015-0304, CVE-2015-0305, CVE-2015-0306, CVE-2015-0307, CVE-2015-0308, CVE-2015-0309 ( http://helpx.adobe.com/security/products/flash-player/apsb15-01.html ) * Tue Dec 09 2014 anssi <anssi> 11.2.202.425-1.mga5.nonfree + Revision: 802437 - new version 11.2.202.425 o fixes CVE-2014-0580, CVE-2014-0587, CVE-2014-8443, CVE-2014-9162, CVE-2014-9163, CVE-2014-9164 ( http://helpx.adobe.com/security/products/flash-player/apsb14-27.html ) * Tue Nov 25 2014 anssi <anssi> 11.2.202.424-1.mga5.nonfree + Revision: 799202 - new version 11.2.202.424 o additional hardening for CVE-2014-8439 ( http://helpx.adobe.com/security/products/flash-player/apsb14-26.html ) * Tue Nov 11 2014 anssi <anssi> 11.2.202.418-1.mga5.nonfree + Revision: 796475 - new version 11.2.202.418 o fixes CVE-2014-0573, CVE-2014-0574, CVE-2014-0576, CVE-2014-0577, CVE-2014-0581, CVE-2014-0582, CVE-2014-0583, CVE-2014-0584, CVE-2014-0585, CVE-2014-0586, CVE-2014-0588, CVE-2014-0589, CVE-2014-0590, CVE-2014-8437, CVE-2014-8438, CVE-2014-8440, CVE-2014-8441, CVE-2014-8442 ( http://helpx.adobe.com/security/products/flash-player/apsb14-24.html ) * Tue Nov 04 2014 anssi <anssi> 11.2.202.411-1.mga5.nonfree + Revision: 795561 - new version 11.2.202.411 o fixes CVE-2014-0558, CVE-2014-0564, CVE-2014-0569 ( http://helpx.adobe.com/security/products/flash-player/apsb14-22.html ) * Tue Sep 16 2014 umeabot <umeabot> 11.2.202.406-4.mga5.nonfree + Revision: 679226 - Mageia 5 Mass Rebuild + tv <tv> - s/uggests:/Recommends:/ * Sun Sep 14 2014 tmb <tmb> 11.2.202.406-3.mga5.nonfree + Revision: 675450 - really filter out internal provides and requires * Sun Sep 14 2014 tmb <tmb> 11.2.202.406-2.mga5.nonfree + Revision: 675408 - switch to new __requires/__provides_exclude * Sun Sep 14 2014 anssi <anssi> 11.2.202.406-1.mga5.nonfree + Revision: 675188 - new version 11.2.202.406 o fixes CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 ( http://helpx.adobe.com/security/products/flash-player/apsb14-21.html ) * Thu Aug 14 2014 anssi <anssi> 11.2.202.400-1.mga5.nonfree + Revision: 662452 - new version 11.2.202.400 o fixes CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545 ( https://helpx.adobe.com/security/products/flash-player/apsb14-18.html ) * Tue Jul 08 2014 anssi <anssi> 11.2.202.394-1.mga5.nonfree + Revision: 650748 - new version 11.2.202.394 o fixes CVE-2014-0537, CVE-2014-0539, CVE-2014-4671 ( http://helpx.adobe.com/security/products/flash-player/apsb14-17.html ) * Thu Jun 12 2014 anssi <anssi> 11.2.202.378-1.mga5.nonfree + Revision: 635803 - new version 11.2.202.378 o fixes CVE-2014-0531, CVE-2014-0532, CVE-2014-0533, CVE-2014-0534, CVE-2014-0535, CVE-2014-0536 ( http://helpx.adobe.com/security/products/flash-player/apsb14-16.html ) * Tue May 13 2014 anssi <anssi> 11.2.202.359-1.mga5.nonfree + Revision: 622606 - new version 11.2.202.359 o fixes CVE-2014-0510, CVE-2014-0516, CVE-2014-0517, CVE-2014-0518, CVE-2014-0519, CVE-2014-0520 ( http://helpx.adobe.com/security/products/flash-player/apsb14-14.html ) * Tue Apr 29 2014 anssi <anssi> 11.2.202.356-1.mga5.nonfree + Revision: 618847 - new version 11.2.202.356 o fixes CVE-2014-0515 ( http://helpx.adobe.com/security/products/flash-player/apsb14-13.html ) * Tue Apr 08 2014 anssi <anssi> 11.2.202.350-1.mga5.nonfree + Revision: 612933 - new version 11.2.202.350 o fixes CVE-2014-0506, CVE-2014-0507, CVE-2014-0508, CVE-2014-0509 * Tue Mar 18 2014 anssi <anssi> 11.2.202.346-2.mga5.nonfree + Revision: 604992 - add hal-flash wrapper to allow protected content (e.g. Google Play Movies) playback to work ( http://github.com/cshorler/hal-flash ) * Tue Mar 11 2014 anssi <anssi> 11.2.202.346-1.mga5.nonfree + Revision: 602561 - new version 11.2.202.346 o fixes CVE-2014-0503, CVE-2014-0504 ( http://helpx.adobe.com/security/products/flash-player/apsb14-08.html ) * Fri Feb 21 2014 oden <oden> 11.2.202.341-1.mga5.nonfree + Revision: 595216 - new version 11.2.202.341 o fixes CVE-2014-0498, CVE-2014-0499, CVE-2014-0502 ( http://helpx.adobe.com/security/products/flash-player/apsb14-07.html ) * Tue Feb 04 2014 anssi <anssi> 11.2.202.336-1.mga5.nonfree + Revision: 582111 - new version 11.2.202.336 o fixes CVE-2014-0497 ( http://helpx.adobe.com/security/products/flash-player/apsb14-04.html ) * Wed Jan 22 2014 anssi <anssi> 11.2.202.335-1.mga4.nonfree + Revision: 567465 - new version 11.2.202.335 o fixes CVE-2014-0491, CVE-2014-0492 ( http://helpx.adobe.com/security/products/flash-player/apsb14-02.html ) * Tue Dec 10 2013 anssi <anssi> 11.2.202.332-1.mga4.nonfree + Revision: 556183 - new version 11.2.202.332 o fixes CVE-2013-5331, CVE-2013-5332 ( http://helpx.adobe.com/security/products/flash-player/apsb13-28.html ) * Sun Nov 17 2013 anssi <anssi> 11.2.202.327-1.mga4.nonfree + Revision: 551562 - new version 11.2.202.327 o fixes CVE-2013-5329, CVE-2013-5330 ( http://www.adobe.com/support/security/bulletins/apsb13-26.html ) * Thu Oct 31 2013 tmb <tmb> 11.2.202.310-2.mga4.nonfree + Revision: 548372 - Mageia 4 rebuild * Tue Sep 10 2013 anssi <anssi> 11.2.202.310-1.mga4.nonfree + Revision: 477326 - new version 11.2.202.310 o fixes CVE-2013-3361, CVE-2013-3362, CVE-2013-3363, CVE-2013-5324 ( http://www.adobe.com/support/security/bulletins/apsb13-21.html ) * Tue Jul 09 2013 anssi <anssi> 11.2.202.297-1.mga4.nonfree + Revision: 452217 - new version 11.2.202.297 o fixes CVE-2013-3344, CVE-2013-3345, CVE-2013-3347 ( http://www.adobe.com/support/security/bulletins/apsb13-17.html ) * Tue Jun 11 2013 anssi <anssi> 11.2.202.291-1.mga4.nonfree + Revision: 441972 - new version 11.2.202.291 o fixes CVE-2013-3343 ( http://www.adobe.com/support/security/bulletins/apsb13-16.html ) * Tue May 14 2013 anssi <anssi> 11.2.202.285-1.mga3.nonfree + Revision: 413149 - new version 11.2.202.285 o fixes CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335 * Tue Apr 09 2013 anssi <anssi> 11.2.202.280-1.mga3.nonfree + Revision: 409194 - new version 11.2.202.280 * Tue Mar 12 2013 anssi <anssi> 11.2.202.275-1.mga3.nonfree + Revision: 402189 - new version 11.2.202.275 o fixes CVE-2013-0646, CVE-2013-0650, CVE-2013-1371, CVE-2013-1375 ( http://www.adobe.com/support/security/bulletins/apsb13-09.html ) * Wed Feb 27 2013 anssi <anssi> 11.2.202.273-3.mga3.nonfree + Revision: 400530 - re-enable both linuxdownload urls and exchange i386 md5sums * Wed Feb 27 2013 oden <oden> 11.2.202.273-2.mga3.nonfree + Revision: 400498 - 11.2.202.273 (fixes CVE-2013-0504,0643,0648) * Tue Feb 12 2013 anssi <anssi> 11.2.202.270-1.mga3.nonfree + Revision: 398117 - new version 11.2.202.270 o fixes CVE-2013-0637, CVE-2013-0638, CVE-2013-0639, CVE-2013-0642, CVE-2013-0644, CVE-2013-0645, CVE-2013-0647, CVE-2013-0649, CVE-2013-1365, CVE-2013-1366, CVE-2013-1367, CVE-2013-1368, CVE-2013-1369, CVE-2013-1370, CVE-2013-1372, CVE-2013-1373, CVE-2013-1374 (advisory: http://www.adobe.com/support/security/bulletins/apsb13-05.html ) * Thu Feb 07 2013 anssi <anssi> 11.2.202.262-1.mga3.nonfree + Revision: 395236 - new version 11.2.202.262 o fixes CVE-2013-0633, CVE-2013-0634 * Sun Jan 13 2013 anssi <anssi> 11.2.202.261-1.mga3.nonfree + Revision: 361962 - new version 11.2.202.261 (CVE-2013-0630) * Fri Jan 11 2013 umeabot <umeabot> 11.2.202.258-2.mga3.nonfree + Revision: 350484 - Mass Rebuild - https://wiki.mageia.org/en/Feature:Mageia3MassRebuild * Tue Dec 11 2012 anssi <anssi> 11.2.202.258-1.mga3.nonfree + Revision: 329804 - new version 11.2.202.258 o fixes CVE-2012-5676, CVE-2012-5677, CVE-2012-5678 * Wed Nov 07 2012 anssi <anssi> 11.2.202.251-1.mga3.nonfree + Revision: 315408 - new version 11.2.202.251 o fixes CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280 * Tue Oct 09 2012 anssi <anssi> 11.2.202.243-1.mga3.nonfree + Revision: 303969 - new version 11.2.202.243 o fixes CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264, CVE-2012-5265, CVE-2012-5266, CVE-2012-5267, CVE-2012-5268, CVE-2012-5269, CVE-2012-5270, CVE-2012-5271, CVE-2012-5272 (bulletin: http://www.adobe.com/support/security/bulletins/apsb12-22.html ) * Sun Aug 19 2012 anssi <anssi> 11.2.202.238-1.mga3.nonfree + Revision: 282305 - new version (CVE-2012-1535) * Sat Jun 09 2012 anssi <anssi> 11.2.202.236-1.mga3.nonfree + Revision: 258416 - new version 11.2.202.236 o fixes critical security vulnerabilities (CVE-2012-2034, CVE-2012-2035, CVE-2012-2036, CVE-2012-2037, CVE-2012-2038, CVE-2012-2039, CVE-2012-2040, http://www.adobe.com/support/security/bulletins/apsb12-14.html ) - require libraries by file names instead of package names (suggested by simplew, fixes #5824 (unable to use libcairo-xcb2)) * Fri May 04 2012 anssi <anssi> 11.2.202.235-1.mga2.nonfree + Revision: 234712 - 11.2.202.235 o fixes security issue CVE-2012-0779 (http://www.adobe.com/support/security/bulletins/apsb12-09.html) * Tue Apr 17 2012 anssi <anssi> 11.2.202.233-1.mga2.nonfree + Revision: 231210 - new version 11.2.202.233 o bugfixes related to stability and performance - add some more direct requirements (they were also satisfied indirectly via GTK+) * Thu Mar 29 2012 anssi <anssi> 11.2.202.228-1.mga2.nonfree + Revision: 227535 - new version 11.2.202.228 o fixes a memory corruption vulnerability (CVE-2012-0773) * Tue Mar 06 2012 anssi <anssi> 11.1.102.63-1.mga2.nonfree + Revision: 220477 - new version 11.1.102.63 o fixes CVE-2012-0768, CVE-2012-0769 ( http://www.adobe.com/support/security/bulletins/apsb12-05.html ) * Fri Feb 17 2012 anssi <anssi> 11.1.102.62-1.mga2.nonfree + Revision: 210094 - new version o fixes CVE-2012-0751, CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756, CVE-2012-0767 * Fri Dec 16 2011 anssi <anssi> 11.1.102.55-2.mga2.nonfree + Revision: 182382 - use proxy settings from /etc/urpmi/proxy.cfg (bug #3044) * Fri Nov 11 2011 anssi <anssi> 11.1.102.55-1.mga2.nonfree + Revision: 166427 - new version 11.1.102.55 o fixes overflow and corruption vulnerabilities CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2459, CVE-2011-2460 - normal download used again for x86_64, upstream issue regarding missing files was fixed - prevent installation of -kde in %%pre if main package installation was prevented by its %%pre * Thu Oct 06 2011 anssi <anssi> 11.0.1.152-1.mga2.nonfree + Revision: 152244 - prefer unversioned archive on x86_64 (for now), fallbacking to the versioned one, since the latter one misses some files + doktor5000 <doktor5000> - new version 11.0 final - obsolete flash-player-plugin11 - remove fake x86_64 stuff, provide native x86_64 plugin - remove Require for nspluginwrapper - remove obsolete empty %%defattr and %%_localstatedir * Thu Sep 22 2011 anssi <anssi> 10.3.183.10-1.mga2.nonfree + Revision: 146583 - new version 10.3.183.10 o fixes CVE-2011-2426, CVE-2011-2427, CVE-2011-2428, CVE-2011-2429 CVE-2011-2430, CVE-2011-2444 - enforce permissions for extracted files (no effect with current Flash Player version) - new version 10.3.183.7 - clean up on download failure - provide a fake 64-bit version of the package which installs the 32-bit version of the Flash Player, to make the installation easier on 64-bit installations that do not have 32-bit nonfree repository set up by default; the package will be automatically upgraded to a true 64-bit stable Flash Player when it becomes available - split out KDE KCM module into -kde subpackage (bug #1275) - download in %%pre instead of %%posttrans - unpack in %%post instead of %%posttrans - always re-enable GTK flash-player-properties in KDE as well - drop now unneeded calls to nspluginwrapper and gtk-icon-cache, they are now handled by filetriggers - new version + ahmad <ahmad> - Change references of PLF to Mageia in download-flash-player-plugin * Fri Jul 08 2011 ahmad <ahmad> 10.3.181.34-1.mga2.nonfree + Revision: 120127 - Update to 10.3.181.34 * Wed Jun 15 2011 ahmad <ahmad> 10.3.181.26-1.mga2.nonfree + Revision: 107959 - Update to 10.3.181.26 * Thu Jun 09 2011 ahmad <ahmad> 10.3.181.22-1.mga2.nonfree + Revision: 102309 - Update to 10.3.181.22 * Fri May 13 2011 anssi <anssi> 10.3.181.14-1.mga1 + Revision: 98265 - new version - adapt script for added files - 32bit KDE now has a settings applet in KDE System Settings, other desktops (including 64bit KDE) have a standalone configuration application * Wed Apr 20 2011 ennael <ennael> 10.2.159.1-1.mga1 + Revision: 89107 - imported package flash-player-plugin