On 4 February 2015 at 00:43, inode0 inode0@gmail.com wrote:
On Tue, Feb 3, 2015 at 4:32 PM, Robert Moskowitz rgm@htt-consult.com wrote:
On 02/03/2015 04:48 PM, inode0 wrote:
There is another exploit in the wild that adobe expects to fix with another release sometime this week.
I have a limited use of flash. For sites like cnn. Well, I think one of my banks uses it for their home page...
https://bugzilla.redhat.com/show_bug.cgi?id=1188329
I'd just take a few flash free days until adobe gets it fixed to be a little safer.
John
From https://helpx.adobe.com/security/products/flash-player/apsa15-02.html :
“Revisions
February 2, 2015 - removed Flash Player version 11.x from the list of affected versions. Version 11.x and earlier do not support the functionality affected by CVE-2015-0313. ”
So they found that Linux/Firefox isn't affected IIUC.