Flash Player 17.0.0.134
Adobe heeft gisteravond Flash Player 17.0.0.134 uitgebracht. Deze nieuwe versie van Flash dicht in de eerste plaats elf beveiligingslekken. De meeste zijn kritiek en kunnen leiden tot het uitvoeren van schadelijke code op de pc. Veel van de lekken zijn ontdekt door het Google Project Zero Team.
Behalve deze beveiligingsupdates brengt Flash 17 ook nog wat nieuwe kenmerken. Zo toont het configuratiescherm van Flash nu welke versies van de plugin geïnstalleerd zijn. Aangezien Flash in drie varianten komt (ActiveX voor Internet Explorer, NPAPI voor Firefox en PPAPI voor Chrome, Opera en Safari) is dat wel zo handig: nu zie je gelijk welke browsers je nog moet updaten.
Ten slotte is het installatieproces voor Mac vergemakkelijkt en zijn nog andere verbeteringen doorgevoerd en foutjes opgelost. Details kun je hieronder nalezen.
Op deze pagina kun je - voor elke browser - controleren welke versie van de plugin je hebt.
Flash Player kun je los downloaden voor Internet Explorer (onder Windows Vista en 7), Safari voor Mac en Firefox en Opera voor Windows, Mac of Linux. Ook kun je updaten via de automatische updater. Flash wordt standaard meegeleverd - en automatisch bijgewerkt - in Google Chrome. Voor Internet Explorer onder Windows 8 en 8.1 wordt Flash geactualiseerd via Windows Update.
Let op! Haal op de website van Flash het vinkje weg bij McAfee Security Scan Plus, Google Chrome of andere optionele software en klik op Nu installeren
These updates resolve memory corruption vulnerabilities that could lead to code execution (CVE-2015-0332, CVE-2015-0333, CVE-2015-0335, CVE-2015-0339).
These updates resolve type confusion vulnerabilities that could lead to code execution (CVE-2015-0334, CVE-2015-0336).
These updates resolve a vulnerability that could lead to a cross-domain policy bypass (CVE-2015-0337).
These updates resolve a vulnerability that could lead to a file upload restriction bypass (CVE-2015-0340).
These updates resolve an integer overflow vulnerability that could lead to code execution (CVE-2015-0338).
These updates resolve use-after-free vulnerabilities that could lead to code execution (CVE-2015-0341, CVE-2015-0342).
New Features
- Flash Player Control Panel Improvements
The system control panel will now display the currently installed version of Flash Player's ActiveX, NPAPI, and PPAPI plugins. We've also clarified how Chrome and Chromium (PPAPI) users can edit their Flash Player settings.
- Flash Player Mac Installer Improvements
The Mac installer will no longer request users close the Chrome browser during installation. In future versions we'll work to further improve the user experience of our installers.
- ADT Packaging Time Improvement with Support for Parallel Compilation for iOS
AIR 16 introduced support for compilation and packaging of iOS applications for both 32 bit and 64 bit platforms. With this improvement, we can now compile 32 and 64 bit architecture in parallel to cut packaging times up to 50 percent.
- VideoTexture Support in AIR for Windows, Mac and iOS
We've introduced a new ActionScript feature that allows hardware accelerated video to be used as a source texture in a Stage3D environment. Currently, using video with Stage3D requires the use of the Video object, which is not accelerated, and manipulation of the bitmap representations of the video frames. This new feature, called VideoTexture, allows direct access to a texture object that is sourced from a Netstream or Camera object. As of the first Flash Player 17 this feature is back and now available on AIR Mac, Windows and iOS. Look for Android support in an upcoming release. Please see the VideoTexture blog post for implementation details.
- Stage3D - Standard Extended Profile for AIR Mobile
In recent releases of the Runtime we've added support for Standard and Standard Constrained Stage3D profiles. With AIR 17 we're adding a new Standard Extended Profile for iOS and Android devices that support GLES3. Availability of the “standardExtended" profile indicates the availability of AGAL3. The same profile name can then be used in requestContext3D and requestContext3DMatchingProfiles methods of Stage3D.
The “standardExtended” profile requires OpenGL ES 3.0 which is present on many high end smartphones and tablets. AGAL3 increases register limits for vertex attributes, fragment constants and tokens. While we're focusing on mobile first, we anticipate bringing this functionality to the desktop in a future update.
GratisSoftware.nl
Reageren