Welcome!
Important information
-- Spectre and Meltdown vulnerabilities
-- Change in MX sources

News
-- MX Linux on social media: here
-- Mepis support still here

Current releases
-- MX-17.1 Final release info here
-- antiX-17 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

Flash Security Update

Feel free to talk about anything and everything in this board. Just don't post offensive topics that are meant to cause trouble with other members or are derogatory towards people of different genders, race, color, minors (this includes nudity and sex), politics or religion. Let's try to keep peace among the community and for visitors.

No spam on this or any other forums please! If you post advertisements on these forums, your account may be deleted.

Do not copy and paste entire or even up to half of someone else's words or articles into posts. Post only a few sentences or a paragraph and make sure to include a link back to original words or article. Otherwise it's copyright infringement.

You can talk about other distros here, but no MX bashing. You can email the developers of MX if you just want to say you dislike or hate MX.
Message
Author
User avatar
Jerry3904
Forum Veteran
Forum Veteran
Posts: 21806
Joined: Wed Jul 19, 2006 6:13 am

Re: Flash Security Update

#41 Post by Jerry3904 » Sat Feb 22, 2014 1:44 pm

Good addition to the specs I just PM'd
Production: 4.15.0-1-amd64, MX-17.1, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB, Kingston SSD 120 GB and WesternDigital 1TB
Testing: AAO 722: 4.15.0-1-386. MX-17.1, AMD C-60 APU, 4 GB

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9278
Joined: Wed Jul 12, 2006 2:26 pm

Re: Flash Security Update

#42 Post by kmathern » Sat Feb 22, 2014 2:38 pm

Stevo wrote:I just updated a VBox install that hadn't been done in a while, and it is still at 11.2.202.336.

I think you have to add the command to start it up in a terminal to make it visible, something like adding

Code: Select all

x-terminal-emulator -e 'the command you want executed'
--or you can just specify xterm instead of the generic emulator. I'm pretty sure that's what needs to be done (kmathern?), but I see so many complaints from the grumps at the Debian forums about "these gol-dern things a-poppin' up in my face! I hate that in an OS!" I'm a bit leary of adding that.
I think I figured out a way to have it display a notification when flash gets updated by the cron script.

This is my cron script. (I named it "/etc/cron.daily/upgrade-flashplayer")

Code: Select all

#!/bin/sh

grep -q "^flags.*\<sse2\>" /proc/cpuinfo || exit 0

test -x /usr/sbin/update-flashplugin-nonfree || exit 0

BeforeUpdate="$(strings /usr/lib/flashplugin-nonfree/libflashplayer.so | awk '/LNX/{print $2}')"
BeforeUpdateVal=$(strings /usr/lib/flashplugin-nonfree/libflashplayer.so | awk '/LNX/{print $2}' | sed 's/,//g')

/usr/sbin/update-flashplugin-nonfree --install --quiet

AfterUpdate="$(strings /usr/lib/flashplugin-nonfree/libflashplayer.so | awk '/LNX/{print $2}')"
AfterUpdateVal=$(strings /usr/lib/flashplugin-nonfree/libflashplayer.so | awk '/LNX/{print $2}' | sed 's/,//g')

test $AfterUpdateVal -gt $BeforeUpdateVal || exit 0

env XAUTHORITY=$(su - $(who | grep '(:0)' -m1 | awk '{print $1}') -c 'echo $HOME')/.Xauthority DISPLAY=:0 notify-send "Flash Update" \\n"Flash has been updated"\\n\\n"from: "$BeforeUpdate\\n"    to:  "$AfterUpdate\\n\\n"(click here to dismiss this notification)" -t 0
The notification looks like:
flash-update-notification2.png
The notification will only appear when flash gets updated to a new version. The notification will stay on the screen until you click on it to dismiss it.

You could probably add a small flag file to enable or disable the notification, and then test it before executing the notify-send command.

The libnotify-bin package needs to be installed.

The notification works with Xfce4. It might also work with KDE4, but I haven't tested it in that environment.
You do not have the required permissions to view the files attached to this post.
Last edited by kmathern on Wed Feb 26, 2014 10:27 am, edited 2 times in total.

User avatar
Jerry3904
Forum Veteran
Forum Veteran
Posts: 21806
Joined: Wed Jul 19, 2006 6:13 am

Re: Flash Security Update

#43 Post by Jerry3904 » Sat Feb 22, 2014 3:08 pm

Another good one! After this upcoming release, we can start a thread in the Dev Team Forum on specs for this MX app with a provisional title "MX Flash Manager." Target finish date would be RC1 release.

ATM I am thinking of 1) a screen telling the user that flash is non-free, was installed by default, and asking if s/he wants it removed; 2) if no, say a word about ongoing security concerns, and ask if user want to update > manually or automatically; 3) run the manual update or 4) set up the automatic update. Or something along those lines.
Production: 4.15.0-1-amd64, MX-17.1, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB, Kingston SSD 120 GB and WesternDigital 1TB
Testing: AAO 722: 4.15.0-1-386. MX-17.1, AMD C-60 APU, 4 GB

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 15657
Joined: Fri Dec 15, 2006 8:07 pm

Re: Flash Security Update

#44 Post by Stevo » Sat Feb 22, 2014 4:29 pm

Interesting--though I'd like to put that script into a separate .deb package..jeesh, what to name it.

flashplugin-nonfree-auto-update

I guess. Then have it depend on flashplugin-nonfree. Then deb-multimedia's plugin installer would remove the Debian installer and this package, too, if that it what the user wanted to do.

The package could be in the main MEPIS CR, since it's of use to everyone, just not MX users. The MX front-end could then just remove Flash or install the auto-update package.

User avatar
chippy52
Forum Regular
Forum Regular
Posts: 316
Joined: Wed Jul 29, 2009 6:05 pm

Re: Flash Security Update

#45 Post by chippy52 » Sat Feb 22, 2014 7:26 pm

@kmathern
I took your latest script for a try on my M11 install. The update worked fine, but the notification was a no show. Thanks for your efforts.
MX15-x64_KDE_added_June_2016
Intel i5 2400, Asus P8H67-M-EVO, G-Skill Ripjaws 2x4GB DDR3-1333, nVidia GeForce GT430, Seagate 500GB sata3 HDD

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9278
Joined: Wed Jul 12, 2006 2:26 pm

Re: Flash Security Update

#46 Post by kmathern » Sat Feb 22, 2014 7:33 pm

chippy52 wrote:@kmathern
I took your latest script for a try on my M11 install. The update worked fine, but the notification was a no show. Thanks for your efforts.
I rolled it back to the 11.2.202.336 flash version and then tested it in KDE4 on my sid install, it gave me a notification.

Did you install the libnotify-bin package?

User avatar
Eadwine Rose
Forum Veteran
Forum Veteran
Posts: 5721
Joined: Wed Jul 12, 2006 2:10 am

Re: Flash Security Update

#47 Post by Eadwine Rose » Sat Feb 22, 2014 7:50 pm

Just a note, that package is not installed in MX yet, so needs to be brought along with this one if and all :smile:
MX-17.1_x64 Horizon 14-3-2018 * 4.15.0-1-amd64 ext4 Xfce 4.12.3 * AMD Asus M4A785TD-V EVO AM3 * ASUS GF GT640-1GD5-L NVIDIA 384.111 * AMD Proc. Athl II X4 635, sAM3 * HDA ATI SB VT1708S An * 2x4Gb DDR3 1600 Kingst * 22" Samsung SyncM P2250 * HP F2280

User avatar
Jerry3904
Forum Veteran
Forum Veteran
Posts: 21806
Joined: Wed Jul 19, 2006 6:13 am

Re: Flash Security Update

#48 Post by Jerry3904 » Sat Feb 22, 2014 7:54 pm

Yup it is. Set preferences to Wheezy Backports and reload, I think you will see it.
Production: 4.15.0-1-amd64, MX-17.1, AMD FX-4130 Quad-Core, GeForce GT 630/PCIe/SSE2, 8 GB, Kingston SSD 120 GB and WesternDigital 1TB
Testing: AAO 722: 4.15.0-1-386. MX-17.1, AMD C-60 APU, 4 GB

User avatar
kmathern
Forum Veteran
Forum Veteran
Posts: 9278
Joined: Wed Jul 12, 2006 2:26 pm

Re: Flash Security Update

#49 Post by kmathern » Sat Feb 22, 2014 8:08 pm

Jerry3904 wrote:Yup it is. Set preferences to Wheezy Backports and reload, I think you will see it.
It's in the regular Wheezy repos, not backports.

I don't know about beta2, but libnotify-bin isn't preinstalled on the Feb. 11 - pre beta 3 iso (beta3-3.iso).

User avatar
chippy52
Forum Regular
Forum Regular
Posts: 316
Joined: Wed Jul 29, 2009 6:05 pm

Re: Flash Security Update

#50 Post by chippy52 » Sat Feb 22, 2014 8:43 pm

Yes I do have the libnotify-bin package installed. I did notice that one of the depends [ libnotify1-gtk2.10 ] was available. Maybe in one of the CR repositories?
MX15-x64_KDE_added_June_2016
Intel i5 2400, Asus P8H67-M-EVO, G-Skill Ripjaws 2x4GB DDR3-1333, nVidia GeForce GT430, Seagate 500GB sata3 HDD

Post Reply

Return to “General”