[Secure-testing-team] Bug#832493: flashplugin-nonfree: update-flashplugin-nonfree detect upstream version as 22.0.0.209

[sharuzzaman]

Package: flashplugin-nonfree
Version: 1:3.6.1+b1
Severity: grave
Tags: security
Justification: renders package unusable

Dear Maintainer,

When running the update-flashplugin-nonfree script, the upstream version detected is 22.0.0.209

This is wrong and will cause the update to fail to get the update package for Linux.

The correct version should be 11.2.202.632 from http://www.adobe.com/software/flash/about/


root at debian:~# update-flashplugin-nonfree --verbose --install
options :  --verbose --install --
temporary directory: /tmp/flashplugin-nonfree.sAvyN55r6l
importing public key ...
selected action = --install
installed version = 11.2.202.626
upstream version = 22.0.0.209







-- Package-specific info:
Debian version: stretch/sid
Architecture: i386
Package version: 1:3.6.1+b1
Adobe Flash Player version: LNX 11,2,202,626
MD5 checksums:
	160a01dd00527304e5291e65eb0c65e2  /var/cache/flashplugin-nonfree/get-upstream-version.pl
	ddbcf9e06f499a3bc77dad72e90d8dd7  /var/cache/flashplugin-nonfree/install_flash_player_11_linux.i386.tar.gz
	fac0b6ad795d519487b642f4552a8665  /usr/lib/flashplugin-nonfree/libflashplayer.so
Alternatives:
	flash-mozilla.so - auto mode
	  link best version is /usr/lib/flashplugin-nonfree/libflashplayer.so
	  link currently points to /usr/lib/flashplugin-nonfree/libflashplayer.so
	  link flash-mozilla.so is /usr/lib/mozilla/plugins/flash-mozilla.so
	/usr/lib/flashplugin-nonfree/libflashplayer.so - priority 50
	lrwxrwxrwx 1 root root 34 Aug 25  2015 /usr/lib/mozilla/plugins/flash-mozilla.so -> /etc/alternatives/flash-mozilla.so
	/usr/lib/mozilla/plugins/flash-mozilla.so: symbolic link to /etc/alternatives/flash-mozilla.so

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.6.0-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages flashplugin-nonfree depends on:
ii  binutils               2.26.1-1
ii  ca-certificates        20160104
ii  debconf [debconf-2.0]  1.5.59
ii  gnupg                  1.4.20-6
ii  libatk1.0-0            2.20.0-1
ii  libcairo2              1.14.6-1+b1
ii  libcurl3-gnutls        7.47.0-1
ii  libfontconfig1         2.11.0-6.4
ii  libfreetype6           2.6.3-3+b1
ii  libgcc1                1:6.1.1-9
ii  libglib2.0-0           2.48.1-2
ii  libgtk2.0-0            2.24.30-4
ii  libnspr4               2:4.12-2
ii  libnss3                2:3.23-2
ii  libpango1.0-0          1.40.1-1
ii  libstdc++6             6.1.1-9
ii  libx11-6               2:1.6.3-1
ii  libxext6               2:1.3.3-1
ii  libxt6                 1:1.1.5-1
ii  wget                   1.18-2

flashplugin-nonfree recommends no packages.

Versions of packages flashplugin-nonfree suggests:
pn  flashplugin-nonfree-extrasound  <none>
ii  fonts-dejavu                    2.36-1
pn  hal                             <none>
ii  iceweasel                       45.2.0esr-1
pn  konqueror-nsplugins             <none>
ii  ttf-mscorefonts-installer       3.6
pn  ttf-xfree86-nonfree             <none>

-- no debconf information