Adobe Flash Player Critical Security Update

[Corrine]

Adobe has released Version 22.0.0.209 of Adobe Flash Player for Microsoft Windows, Macintosh and Chrome as well as Version 11.2.202.632 for Linux. The Extended Support Release for Windows and Macintosh was updated to Version 18.0.0.366.

• Non-IE Plugin (Opera, Firefox, Etc.): http://download.macromedia.com/get/...ensing/win/install_flash_player_22_plugin.exe
• Flash Player For Internet Explorer, Windows 7 and earlier: http://download.macromedia.com/get/...sing/win/install_flash_player_22_active_x.exe
• Internet Explorer and Microsoft Edge: Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10, and Windows 10 Version 1511: Adobe Flash Player is now a security bulletin rather than a security advisory and is distributed via the normal Windows Update channel.
• Flash Player Uninstaller: http://download.macromedia.com/get/flashplayer/current/support/uninstall_flash_player.exe
• Adobe AIR: Adobe - Adobe AIR

 

[satrow]

Extended Support Release - Flash Player 18.0.0.366 is what I see (not installed it yet): Adobe Flash Player Distribution | Adobe

There's also an updated notice there:

ATTENTION: Important Changes to Extended Support Release

The Extended Support Release was originally created to help minimize the time IT administrators spend certifying a new Flash Player release, by restricting the number of changes introduced in a given release to only security changes and critical functional fixes. At the time, functional changes far outweighed the number of security fixes included with each release of Flash Player. In the modern security landscape; however, the opposite is true and the combination of proactive and responsive security mitigations far outweigh functional changes. In practice, the ESR no longer insulates IT organizations from the vast majority of changes included in the standard Flash Player release, providing little relief in terms of reduced functional risk. As a result, we have decided to discontinue the ESR branch and instead focus solely on the standard release. Focusing on the standard release allows us to be more agile in response scenarios, and to focus more deeply on both testing and new security engineering efforts moving forward.

To permit organizations sufficient time for testing and certification, the ESR will be maintained and updated until October 11, 2016, after which point organizations will need to transition to the standard release.

 

[Corrine]

Satrow to the rescue again! 18.0.0.360 is the affected version and, as you indicated, 18.0.0.366 is the updated version.

 

[Corrine]

Adobe Flash (ActiveX version for IE, on Win7 and earlier) has been updated to 22.0.0.210.

The direct download link will offer this latest version:

Internet Explorer - http://download.macromedia.com/get/...sing/win/install_flash_player_22_active_x.exe

Note: The plugin version has NOT been changed... it remains at 22.0.0.209. Adobe - Flash Player