On 01/23/2015 10:51 AM, Martin Stransky wrote:
Folk,
There's a live 0-day flash vulnerability which is not fixed yet [1][2].
If you use flash plugin I recommend you to enable the click-to-play mode
for it.
There's also a Fedora Firefox update with such change [3].
ma.
[1]
https://isc.sans.edu/diary/Flash+0-Day+Exploit+Used+by+Angler+Exploit+Kit/19213
[2]
http://malware.dontneedcoffee.com/2015/01/unpatched-vulnerability-0day-in-flash.html
[3] https://bugzilla.redhat.com/show_bug.cgi?id=1185241
This vulnerability has got CVE-2015-0311 name [1]. Thx to drago01 to
point that out. Unfortunately it's still unfixed by Adobe and latest
flash for Linux/Firefox (11.2.202.438) is still vulnerable.
ma.
[1] http://helpx.adobe.com/security/products/flash-player/apsa15-01.html
[2] http://www.adobe.com/software/flash/about/
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
