Copy link to clipboard
Copied
Hello,
Fetching (then expanding) the Dec 10, 2019 version of AdobeFlashPlayerCatalog_SCUP.cab from URL:
I notice that there are no longer any filled-in SecurityBulletinID tags in the xml.
e.g., the previous version (from Nov 13, 2019) had things like the following (for Flash Player ActiveX, Plugin, and PPAPI)
<sdp:SecurityBulletinID>APSB19-46</sdp:SecurityBulletinID>
Anyone know why this is?
This page still shows APSB19-46 is the latest Flash Player security update:
https://helpx.adobe.com/security.html#flashplayer
Thanks.
-RD
The SCUP catalog contains information for the current release (PublicationState="Published") and references several previous releases (PublicationState="Expired"). What you're seeing is references to previous security releases (except for the Sept release, which was a security release).
For the releases you mention:
Copy link to clipboard
Copied
The SecurityBulletinID tag is missing because this release (32.0.0.303) didn't include security updates. This tag is only included on releases that include security fixes.
Security Bulletin APSB10-46 was for the September, 32.0.0.255, Flash Player release, which did contain security fixese.
See https://helpx.adobe.com/security.html#flashplayer for more information on Flash Player Security Bulletins
Copy link to clipboard
Copied
Yes, BUT previous versions of this file contained multiple APSB#s
e.g.,
the Aug 13 file had the current *AND* the previous APSB# in it:
<sdp:SecurityBulletinID>APSB19-26</sdp:SecurityBulletinID>
<sdp:SecurityBulletinID>APSB19-30</sdp:SecurityBulletinID>
the Sep 10 one had many of the current *AND* previous APSB#s in it:
<sdp:SecurityBulletinID>APSB19-26</sdp:SecurityBulletinID>
<sdp:SecurityBulletinID>APSB19-30</sdp:SecurityBulletinID>
<sdp:SecurityBulletinID>APSB19-46</sdp:SecurityBulletinID>
The Oct 9 file also had just the current APSB#:
<sdp:SecurityBulletinID>APSB19-46</sdp:SecurityBulletinID>
The Nov 13 file also had just the current APSB#:
<sdp:SecurityBulletinID>APSB19-46</sdp:SecurityBulletinID>
Now the Dec 10 file has no APSB#s
See the issue? How can we glean the latest Flash Player security update if it is not present in the SCUP file?
Thanks.
Copy link to clipboard
Copied
The SCUP catalog contains information for the current release (PublicationState="Published") and references several previous releases (PublicationState="Expired"). What you're seeing is references to previous security releases (except for the Sept release, which was a security release).
For the releases you mention:
Since the Dec release doesn't include previous security releases it doesn't contain any APSB #s
List of all Flash Player security bulletins, and corresponding release numbers is posted at https://helpx.adobe.com/security.html#flashplayer
You can also subscribe to receive security bulletin information at https://helpx.adobe.com/security.html.
Copy link to clipboard
Copied
Thank you; I guess I was used to the older versions of this file from when there was pretty much a monthly security update released for Flash Player!
Copy link to clipboard
Copied
You're welcome.