canonical-partner-dev team mailing list archive

[Nathanaël Naeri <1544409@xxxxxxxxxxxxxxxxxx>]

> I don't know if [having two PPAPI Flash plugins] is that much of a
problem

Come to think of it, it is: the one browser-plugin-freshplayer-
pepperflash recommends, pepperflashplugin-nonfree, must be updated
manually or cronly by sudo update-pepperflashplugin-nonfree --install,
while the one in Canonical's partner repository, adobe-flashplugin,
updates with the rest of the system when the user sudo apt-get dist-
upgrade.

The problem is that when the PPAPI/NPAPI wrapper, FreshPlayerPlugin,
looks for a PPAPI Flash plugin in various directories where it may be,
the one installed by pepperflashplugin-nonfree has a higher priority
over the one installed by adobe-flashplugin:

https://github.com/i-rinat/freshplayerplugin/blob/master/src/config_pepperflash.c

So the wrapper will wrap the pepperflashplugin-nonfree plugin.
Therefore, a user who installs adobe-flashplugin as the plugin and
browser-plugin-freshplayer-pepperflash as the wrapper will actually use
pepperflashplugin-nonfree as the plugin, and if they don't notice that,
there is little reason that they'll think about updating that plugin
independently of the rest of their system. This will eventually lead to
them using an outdated Flash plugin, with the associated security risks.

I therefore sincerely believe that browser-plugin-freshplayer-
pepperflash (in Ubuntu not in Debian) should recommend
pepperflashplugin-nonfree | adobe-flashplugin instead of just the
former, and that pepperflashplugin-nonfree and adobe-flashplugin should
conflict with each other so that they don't install alongside.

I've added this bug to the packages pepperflashplugin-nonfree and adobe-
flashplugin to reflect that last point (the missing Conflicts), since
I'm not sure it warrants its own bug report.

** Also affects: adobe-flashplugin (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: pepperflashplugin-nonfree (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Canonical
Partner Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1544409

Title:
  Flash plugin is installed as a dependency of browser-plugin-
  freshplayer-pepperflash (freshplayerplugin) even if it is already
  installed by another package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/adobe-flashplugin/+bug/1544409/+subscriptions