Adobe Flash Player 28.0.0.137

Adobe has released Flash Player 28.0.0.137 for Windows, Macintosh, Linux and Chrome OS. These updates address an important out-of-bounds read vulnerability that could lead to information exposure.

Adobe recommends users update their product installations to the latest versions:
  • Users of Adobe Flash Player 28.0.0.126 and earlier versions for Firefox (Windows) should update to Adobe Flash Player 28.0.0.137
  • Users of Adobe Flash Player Desktop Runtime 28.0.0.126 and earlier versions for Macintosh should update to Adobe Flash Player 28.0.0.137
  • Adobe Flash Player installed with Google Chrome will be automatically updated to the current version.
  • Adobe Flash Player installed for Internet Explorer on Windows 8.1 will be automatically updated to the current version.
  • Adobe Flash Player installed for Microsoft Edge and Internet Explorer 11 on Windows 10 will be automatically updated to the current version.
  • Users of Adobe Flash Player Desktop Runtime 28.0.0.126 and earlier versions for Linux should update to Adobe Flash Player 28.0.0.137

Overview
Adobe Flash Player 28 drives innovation for rich, engaging digital experiences with new features for cross-platform browser-based viewing of expressive rich internet applications, content, and videos across devices. This release provides access to the Flash Player 28 runtime for Windows desktop, Mac OS, iOS and Android environments.

What's new in Flash Player 28
Adobe Flash Player 28 includes the following new features:
  • Swift based ANE Support in AIR (iOS/tvOS).
  • iOS SDK Upgrade.
  • Localization of permission purpose strings on iOS.
  • Android SDK Upgrade.
  • Android TV Support.
  • Support for embed bitcode in iOS/tvOS.
  • Apple TV support (Beta Quality).
  • AIR Desktop - Audio Device Manager ActionScript API.
  • AIR Desktop - Support for selection of GPU preference in multi-GPU system.

For a full list of features in Flash Player and AIR, including features introduced in previous releases, please review the document here.

Download Flash Player 28.0.0.137
The following downloads provide the Adobe Flash Player 28.0.0.137 installers for Windows, Linux and Mac OS X. Download the files appropriate for you:
Adobe Flash Player Installer (Credit: Adobe)

Security fixes:
This release contains the following security fixes:
  • Fixed Out-of-bounds Read vulnerabilities that could lead to information disclosure (CVE-2018-4871).

Sources:
Adobe Flash Player 28 Release Notes
Adobe Security Bulletins and Advisories
APSB18-01 Security updates available for Adobe Flash Player

No comments: