Skip to main content
A
Anonymous
March 12, 2008
Question

Flash Player 9 - April Security Update

  • March 12, 2008
  • 4 replies
  • 700 views
Hi,

I am currently preparing a reccomendation for my employer as to how to prepare our infrastructure for the security update planned for the new April version of the Flash player. We run several business critical services via xml socket connections and it seems we will need to satisfy an XML policy file request on port 843 to ensure these services are supported by the new player.

At the moment, I am suprised to see Adobe seems to be expecting everyone in this position to develop their own solutions to this, though some of the documentation they have released hints at a "policy file server".

Is anyone aware of an official Adobe or otherwise licensed solution to this. There's a placeholder for a how-to here : http://www.adobe.com/devnet/flashplayer/articles/socket_policy_files.html but the content is conspicuous by it's abscence.

If anyone's aware of a common approach to this, when the player will be released or how to obtain a beta version of the player for testing, please let me know.


Thanks

TomG
    This topic has been closed for replies.

    4 replies

    A
    Anonymous
    March 20, 2008
    Tom_g, what's your case Number?
    A
    Anonymous
    March 17, 2008
    Hi Bentley - I also rasied a case, is there any news on either:

    1) What date the content pending at http://www.adobe.com/devnet/flashplayer/articles/socket_policy_files.html will be published. Whilst we're developing our own enterprise policy-fiel server, any prompts from Adobe would be appreciated. I am suprised there's still nothing on this given the date!

    2) If a beta version of this (apparently critical) release of the player will be made available.

    Any info would be greatly appreciated.

    Tom
    W
    WaaZ
    Participating Frequently
    March 18, 2008
    I also have submitted a "web case" here: http://www.adobe.com/go/supportportal/

    Refer to Case #0180075855

    We have had a nightmare with the last player release and could do with a head start for the April release.

    Thanks
    P
    plrgrs
    Participant
    March 17, 2008
    Hi Bentley,

    I have submitted a "web case" here: http://www.adobe.com/go/supportportal/

    Refer to Case #0180069089
    A
    Anonymous
    March 17, 2008
    quote:
    Originally posted by: plrgrs
    Hi Bentley,

    I have submitted a "web case" here: http://www.adobe.com/go/supportportal/

    Refer to Case #0180069089


    Got it. And I'm glad you mentioned it here, because it exposed a big hole in our internal docs (which is, the level 1 support guys have no idea how to answer a request like this! Should be fixed now...)

    A
    Anonymous
    March 12, 2008
    That is one of three articles that will be finished before the April release. In addition there are several new technotes.
    See my other new post for technote links.

    The most important thing is to really, deeply read the current article on Flash Player 9.0.115.0 security and socket policyfiles. It outlines most of what's coming (then the rest will be covered by my other post I think):
    "Security Changes in Flash Player 9" ( http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html)
    P
    plrgrs
    Participant
    March 13, 2008
    Like user Tom__G, I am also interested in any beta versions of Flash Player April release.

    The articles are written really well and explain what code needs to be modified. However, there is no certainty of compatibility with the Flash Player April release until I can install the beta version.

    It would be handy to have the debug version of Flash Player April release as well.
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices