[Secure-testing-team] Bug#801866: flashplugin-nonfree: update-flashplugin-nonfree fails to install last falsh version (again)

[Eric Valette]

Package: flashplugin-nonfree
Version: 1:3.6.1+b1
Severity: critical
Tags: security
Justification: root security hole


update-flashplugin-nonfree --install
already exists: /usr/share/pixmaps/flash-player-properties.png
root at r-x-ceva6380:/home/ceva6380# update-flashplugin-nonfree --status
Flash Player version installed on this system  : 11.2.202.521
Flash Player version available on upstream site: 11.2.202.535
flash-mozilla.so - auto mode
  link best version is /usr/lib/flashplugin-nonfree/libflashplayer.so
  link currently points to /usr/lib/flashplugin-nonfree/libflashplayer.so
  link flash-mozilla.so is /usr/lib/mozilla/plugins/flash-mozilla.so
/usr/lib/flashplugin-nonfree/libflashplayer.so - priority 50

-- Package-specific info:
Debian version: stretch/sid
Architecture: amd64
Package version: 1:3.6.1+b1
Adobe Flash Player version: LNX 11,2,202,521
MD5 checksums:
	160a01dd00527304e5291e65eb0c65e2  /var/cache/flashplugin-nonfree/get-upstream-version.pl
	8bd01552efd2de8ce5b70dbb90538885  /var/cache/flashplugin-nonfree/install_flash_player_11_linux.x86_64.tar.gz
	bf65cc6bb862a6117f21b618f8c98a60  /usr/lib/flashplugin-nonfree/libflashplayer.so
Alternatives:
	flash-mozilla.so - auto mode
	  link best version is /usr/lib/flashplugin-nonfree/libflashplayer.so
	  link currently points to /usr/lib/flashplugin-nonfree/libflashplayer.so
	  link flash-mozilla.so is /usr/lib/mozilla/plugins/flash-mozilla.so
	/usr/lib/flashplugin-nonfree/libflashplayer.so - priority 50
	lrwxrwxrwx 1 root root 34 Aug 25 15:17 /usr/lib/mozilla/plugins/flash-mozilla.so -> /etc/alternatives/flash-mozilla.so
	/usr/lib/mozilla/plugins/flash-mozilla.so: symbolic link to /etc/alternatives/flash-mozilla.so

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.1.9 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF8, LC_CTYPE=en_US.UTF8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF8)
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages flashplugin-nonfree depends on:
ii  binutils               2.25.1-7
ii  ca-certificates        20150426
ii  debconf [debconf-2.0]  1.5.57
ii  gnupg                  1.4.19-5
ii  libatk1.0-0            2.18.0-1
ii  libcairo2              1.14.2-2
ii  libcurl3-gnutls        7.45.0-1
ii  libfontconfig1         2.11.0-6.3
ii  libfreetype6           2.6-2
ii  libgcc1                1:5.2.1-22
ii  libglib2.0-0           2.46.0-2
ii  libgtk2.0-0            2.24.28-1
ii  libnspr4               2:4.10.9-2
ii  libnss3                2:3.20-1
ii  libpango1.0-0          1.38.0-3
ii  libstdc++6             5.2.1-22
ii  libx11-6               2:1.6.3-1
ii  libxext6               2:1.3.3-1
ii  libxt6                 1:1.1.4-1+b1
ii  wget                   1.16.3-3

flashplugin-nonfree recommends no packages.

Versions of packages flashplugin-nonfree suggests:
ii  fonts-dejavu               2.35-1
pn  hal                        <none>
ii  iceweasel                  41.0.1-1
ii  konqueror-nsplugins        4:15.08.1-1
pn  ttf-mscorefonts-installer  <none>
ii  ttf-xfree86-nonfree        4.2.1-4

-- no debconf information