Changes

revision="520090725"

revision="520090725"

== Disable Automatic Update dialog in Adobe Flash Player 10 (and 9) ==

It seems that Flash checks in to the mother ship Adobe at regular bases to check if there is an update available. And if so, it presents the user with a dialog asking if he wants to upgrade Flash to the latest version, which is what we don't want when the software is managed by WPKG.To prevent this from happening, you can do the following:

* this file now has to be added to the FlashPlayer installation directory during the install of the package. You can do this by just plain copying the file into that directory. Add the next lines to your Flash package:

Note: This probably also works for file will prevent current and older versions of Flash (<9), but I believe the mms.cfg file then has to be copied to the Windows\system32 directory? == Adobe Flash Player security settings for "Clickjacking" vulnerability (APSA08from auto-08) == Waiting for the next version of Flash Player to be available, you are strongly encouraged to apply the following settings for security reasons: http://www.adobe.com/support/security/advisories/apsa08-08.html. According to bulletin and to the "Adobe Flash Player Administration Guide" (you find the link in the same security bulletin): * create a file named "mms.cfg"* write in this file the lines containing the "ParameterName = ParameterValue" pairs you need, "AVHardwareDisable = 1" in this APSA08-08 case* deploy it with the following WPKG package <source lang="xml"><package id="flash-settings" name="Adobe Flash Player settings for APSA08-08 vulnerability" revision="1" reboot="false" priority="0" execute="once"> <install cmd='%COMSPEC% /c copy /Y "%SOFTWARE%\Flash\settings\mms.cfg " "%WINDIR%\system32\Macromed\Flash\" ' /></package></source> Or you could just integrate this line with the installation packages above, if you do not want to keep it as a separate packageupdating.

=== Adobe Flash Player 9.0.124246.0 for Firefox ===

You are encouraged to upgrade for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.html and then to apply the [http://www.adobe.com/support/security settings for "Clickjacking" vulnerability (APSA08/advisories/apsa08-08) defined below.html the click-jacking vulnerability] are both addressed in this update. It can be downloaded from [http://kb2.adobe.com/cps/406/kb406791.html here].

<check type="file" condition="versiongreaterorequal" path="%WINDIR%\system32\Macromed\Flash\NPSWF32.dll" value="9.0.124246.0"/>

=== Adobe Flash Player 9.0.124246.0 for Internet Explorer ===

You are encouraged to upgrade The same reasons for security reasons: http://www.adobe.com/support/security/bulletins/apsb08-11.html and then to upgrading apply as for the security settings for "Clickjacking" vulnerability (APSA08-08) defined belowplugin version above, and it can be downloaded from the same place. Installer It is packaged as a .msiexe file, installs as an ActiveX. You can download it from http:so presumably has the same installation/removal/fpdownload.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_active_x.msi - make sure you comply with upgrade syntax as the license: http://www.adobe.com/licensing/distribution/. The line "Adobe Flash Player 9 ActiveX" in Control Panel's Add/Remove Programs doesn't show any minor plugin versionabove, so both this line and but the detailed ocx's file version have to be checked with a logical and conditionfollowing code has not been tested.

<package id="flashplayerieflashplayeractivex" name="Adobe ActiveX Flash Player for Internet Explorer" revision="120090730" reboot="false" priority="0"> <check type="logical" condition="and"> <check type="file" condition="versiongreaterorequalversionequalto" path="%WINDIRSYSTEMROOT%\system32\Macromed\Flash\Flash9fFlash9c.ocx" value="9.0.124246.0"/> <check type="uninstall" condition="exists" path="Adobe Flash Player 9 ActiveX"/> </check> <install cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_xinstall_flash_player_ax.msiexe /S'> <exit code="3010" reboot="true" /> </install> <upgrade cmd='msiexec /q /i %SOFTWARE%\Flash\install_flash_player_active_xinstall_flash_player_ax.msiexe /S'> <exit code="3010" reboot="true" /> </upgrade> <remove cmd='MsiExec%COMSPEC% /C if exist "%SYSTEMROOT%\system32\Macromed\Flash\uninstall_activeX.exe " "%SYSTEMROOT%\system32\Macromed\Flash\uninstall_activeX.exe" /qn /X{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}S'/>