Commenting on the Flash Player 2/14/2017 releases

Question

I've created this topic because I would like to make some comments about the Flash Player 24 release announcement made on Feb. 14. 2017:

2/14/2017 - Release - Flash Player 24

Microsoft has chosen not to release any security updates this February, and that includes any new Flash Player ActiveX updates for Windows 8.1 and Windows 10. Therefore, there are no available Flash Player v24.0.0.221 ActiveX updates for Internet Explorer 11 & Microsoft Edge for Windows 8.1 and Windows 10 and the links to the downloads on the announcement page are incorrect. In fact the Flash Player downloads for Windows 8.1 and Windows 10 actually download the previous version - v24.0.0.194 from KB3214628.

Read about Microsoft's announcement here:

February 2017 security update release – MSRC

Also the Adobe flash player security bulletin APSB17-04:

Adobe Security Bulletin

the bulletin links to a Microsoft security advisory for Windows 8.1 & 10 that does not even exist yet.

Please inform the Adobe security team to update the security bulletin about Microsoft's decision to not release any of their security patches, including the new Flash Player ActiveX updates for Windows 8.1 and Windows 10 which will not be released at this time.

jeromiec83223024 · Answer

Thanks for pointing that out. This stuff was prepared and staged well in advance of Microsoft's announcement.

While we did our part in providing the bits described in the bulletin to Microsoft in a timely manner, they ultimately control the distribution pipeline for their operating system and browser.

As Microsoft has chosen to cancel Patch Tuesday this month, those changes are currently not available for our mutual customers. This is an unprecedented outcome (at least in the time that they've been distributing Flash Player), and we're sure that our counterparts at Microsoft are working diligently to get the best possible, most expedient resolution.

We do not have information at this time as to when Microsoft might push this update out on their platform. I'll let the security team know that we should probably update these documents with a caveat about Microsoft's decision to not ship their Patch Tuesday release.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.