New versions for Adobe Reader, Flash, Shockwave and RealPlayer....

New versions for Adobe Reader, Flash, Shockwave and RealPlayer.
http://www.adobe.com/support/security/bulletins/apsb11-03.html
http://www.adobe.com/support/security/bulletins/apsb11-02.html
http://www.adobe.com/support/security/bulletins/apsb11-01.html
http://service.real.com/realplayer/security/01272011_player/en/

BUG=72480
TEST=Install latest versions of Realplayer, Adobe Reader, Flash (disabling the bundled), Reader and go to about:plugins. No warnings should show up. If the versions are old, warnings should show up.


Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=74870

[panayiotis, 2011-02-09 23:21:24]

I did not test this on Windows/Mac, as I'm only setup to build on linux. Is
anyone of you setup to test it?

[Chris Evans, 2011-02-09 23:28:34]

On 2011/02/09 23:21:24, panayiotis wrote:
> I did not test this on Windows/Mac, as I'm only setup to build on linux. Is
> anyone of you setup to test it?

Sorry, I'm Linux too. I forget what Bernhard is on?

One drive-by comment: can we unify the Shockwave versions in the same way /
place that I unified Flash? It seems consistent and is indeed shared between
platforms.

[panayiotis, 2011-02-09 23:30:47]

I thought about that, does it matter that there is no shockwave
version for linux? Hopefully it will just not match anything?

On Wed, Feb 9, 2011 at 3:28 PM,  <cevans@chromium.org> wrote:
> On 2011/02/09 23:21:24, panayiotis wrote:
>>
>> I did not test this on Windows/Mac, as I'm only setup to build on linux.
>> Is
>> anyone of you setup to test it?
>
> Sorry, I'm Linux too. I forget what Bernhard is on?
>
> One drive-by comment: can we unify the Shockwave versions in the same way /
> place that I unified Flash? It seems consistent and is indeed shared between
> platforms.
>
>
> http://codereview.chromium.org/6471004/
>

[panayiotis, 2011-02-09 23:43:37]

But since I can test on linux, I implemented your suggestion, looks like there's
no issues.

On 2011/02/09 23:30:47, panayiotis wrote:
> I thought about that, does it matter that there is no shockwave
> version for linux? Hopefully it will just not match anything?
> 
> On Wed, Feb 9, 2011 at 3:28 PM,  <mailto:cevans@chromium.org> wrote:
> > On 2011/02/09 23:21:24, panayiotis wrote:
> >>
> >> I did not test this on Windows/Mac, as I'm only setup to build on linux.
> >> Is
> >> anyone of you setup to test it?
> >
> > Sorry, I'm Linux too. I forget what Bernhard is on?
> >
> > One drive-by comment: can we unify the Shockwave versions in the same way /
> > place that I unified Flash? It seems consistent and is indeed shared between
> > platforms.
> >
> >
> > http://codereview.chromium.org/6471004/
> >

[panayiotis, 2011-02-09 23:44:50]

http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
File webkit/plugins/npapi/plugin_list.cc (right):

http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
Question for Bernhard: "true" is for "requires admin"? On Windows 7 I installed
RealPlayer last night and it did  require admin privileges.

[cevans, 2011-02-10 00:29:06]

On Wed, Feb 9, 2011 at 3:44 PM, <panayiotis@google.com> wrote:

>
>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> File webkit/plugins/npapi/plugin_list.cc (right):
>
>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
> Question for Bernhard: "true" is for "requires admin"? On Windows 7 I
> installed RealPlayer last night and it did  require admin privileges.


"true" is the recently-added "requires end user authorization", i.e. the
plug-in is infobar'ed by default instead of just running. It's a security
measure.

Cheers
Chris


>
>
> http://codereview.chromium.org/6471004/
>

[panayiotis, 2011-02-10 00:48:22]

I see. Is "true" a good value for this?

On Wed, Feb 9, 2011 at 4:28 PM, Chris Evans <cevans@google.com> wrote:
> On Wed, Feb 9, 2011 at 3:44 PM, <panayiotis@google.com> wrote:
>>
>>
>>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
>> File webkit/plugins/npapi/plugin_list.cc (right):
>>
>>
>>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
>> webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
>> Question for Bernhard: "true" is for "requires admin"? On Windows 7 I
>> installed RealPlayer last night and it did  require admin privileges.
>
> "true" is the recently-added "requires end user authorization", i.e. the
> plug-in is infobar'ed by default instead of just running. It's a security
> measure.
> Cheers
> Chris
>
>>
>> http://codereview.chromium.org/6471004/
>
>

[cevans, 2011-02-10 00:51:44]

On Wed, Feb 9, 2011 at 4:47 PM, Panayiotis <panayiotis@google.com> wrote:

> I see. Is "true" a good value for this?
>

Shockwave? Yes. Unlike Flash, it's not widely used or required.
Unfortunately, it _is_ widely installed, commonly out of date, and targeted
by malware from time to time.

Cheers
Chris


>
> On Wed, Feb 9, 2011 at 4:28 PM, Chris Evans <cevans@google.com> wrote:
> > On Wed, Feb 9, 2011 at 3:44 PM, <panayiotis@google.com> wrote:
> >>
> >>
> >>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> >> File webkit/plugins/npapi/plugin_list.cc (right):
> >>
> >>
> >>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> >> webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
> >> Question for Bernhard: "true" is for "requires admin"? On Windows 7 I
> >> installed RealPlayer last night and it did  require admin privileges.
> >
> > "true" is the recently-added "requires end user authorization", i.e. the
> > plug-in is infobar'ed by default instead of just running. It's a security
> > measure.
> > Cheers
> > Chris
> >
> >>
> >> http://codereview.chromium.org/6471004/
> >
> >
>

[cevans, 2011-02-10 00:53:05]

On Wed, Feb 9, 2011 at 4:51 PM, Chris Evans <cevans@google.com> wrote:

> On Wed, Feb 9, 2011 at 4:47 PM, Panayiotis <panayiotis@google.com> wrote:
>
>> I see. Is "true" a good value for this?
>>
>
> Shockwave? Yes. Unlike Flash, it's not widely used or required.
> Unfortunately, it _is_ widely installed, commonly out of date, and targeted
> by malware from time to time.
>

Oh, also we're basically very receptive to user feedback when this hits Dev
/ Beta.


Cheers
Chris


> Cheers
> Chris
>
>
>>
>> On Wed, Feb 9, 2011 at 4:28 PM, Chris Evans <cevans@google.com> wrote:
>> > On Wed, Feb 9, 2011 at 3:44 PM, <panayiotis@google.com> wrote:
>> >>
>> >>
>> >>
>>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
>> >> File webkit/plugins/npapi/plugin_list.cc (right):
>> >>
>> >>
>> >>
>>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
>> >> webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
>> >> Question for Bernhard: "true" is for "requires admin"? On Windows 7 I
>> >> installed RealPlayer last night and it did  require admin privileges.
>> >
>> > "true" is the recently-added "requires end user authorization", i.e. the
>> > plug-in is infobar'ed by default instead of just running. It's a
>> security
>> > measure.
>> > Cheers
>> > Chris
>> >
>> >>
>> >> http://codereview.chromium.org/6471004/
>> >
>> >
>>
>
>

[panayiotis, 2011-02-14 18:03:13]

Kind ping? 

On 2011/02/10 00:53:05, cevans_google.com wrote:
> On Wed, Feb 9, 2011 at 4:51 PM, Chris Evans <mailto:cevans@google.com> wrote:
> 
> > On Wed, Feb 9, 2011 at 4:47 PM, Panayiotis <mailto:panayiotis@google.com>
wrote:
> >
> >> I see. Is "true" a good value for this?
> >>
> >
> > Shockwave? Yes. Unlike Flash, it's not widely used or required.
> > Unfortunately, it _is_ widely installed, commonly out of date, and targeted
> > by malware from time to time.
> >
> 
> Oh, also we're basically very receptive to user feedback when this hits Dev
> / Beta.
> 
> 
> Cheers
> Chris
> 
> 
> > Cheers
> > Chris
> >
> >
> >>
> >> On Wed, Feb 9, 2011 at 4:28 PM, Chris Evans <mailto:cevans@google.com>
wrote:
> >> > On Wed, Feb 9, 2011 at 3:44 PM, <mailto:panayiotis@google.com> wrote:
> >> >>
> >> >>
> >> >>
> >>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> >> >> File webkit/plugins/npapi/plugin_list.cc (right):
> >> >>
> >> >>
> >> >>
> >>
>
http://codereview.chromium.org/6471004/diff/1002/webkit/plugins/npapi/plugin_...
> >> >> webkit/plugins/npapi/plugin_list.cc:110: { "", "", "12.0.1.633", true }
> >> >> Question for Bernhard: "true" is for "requires admin"? On Windows 7 I
> >> >> installed RealPlayer last night and it did  require admin privileges.
> >> >
> >> > "true" is the recently-added "requires end user authorization", i.e. the
> >> > plug-in is infobar'ed by default instead of just running. It's a
> >> security
> >> > measure.
> >> > Cheers
> >> > Chris
> >> >
> >> >>
> >> >> http://codereview.chromium.org/6471004/
> >> >
> >> >
> >>
> >
> >

[Bernhard Bauer, 2011-02-14 18:46:03]

LGTM.