[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Chromium is not in main, i.e. it's officially unsupported by Canonical. Formally, only approved Ubuntu community members (MOTUs) support chromium in Ubuntu, while Canonical does not guarantee any support at all. That's the formal aspect at least. In practice, it seems like a Canonical employee, Chad Miller, thankfully does most (all?) of the Chromium work. It's a pretty important package after all, but as you can tell from the not quite optimal security support (still 50+ open security vulnerabilities right now and generally lagging a few weeks or months behind with security fixes), it's on a best-effort basis. Maybe Chad does the work in his free time, or it's just a low priority work task for him. So don't expect an official statement from an Ubuntu representative because formally, Chromium is not a part of Ubuntu that Canonical cares about. Use Firefox which is in main and the default browser if you want Canonical support (or maybe if you can pay some signficant amount of money, Canonical would offer to support Chromium for you). It is important to note that shipping Chromium in a distro is very difficult. Google seems to care about their own packaging, and that's it. It's not an easy upstream to work with. It has bundled source copies of libraries, until some time ago not even official release tarballs, it's a very fast moving target and there is no backwards compatibility for anything. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Here's the official Ubuntu position: The Netscape Plugin API feature can not be supported securely, so it has to go. Preventing attacks wins over features. Upstream explicitly and intentionally has removed NPAPI because it is insecure by design. Additionally, many remote-execution security vulnerabilities are since fixed in code that has dropped NPAPI, and those can not be ignored or backported forever. The correct fix is to update plugins so they support the new, secure API, PPAPI. ** Changed in: chromium-browser (Ubuntu) Status: New = Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: Won't Fix Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Well, I didn't push the update. I'm just a user. But if Ubuntu didn't push newer chromium releases to stable, there'd be a ton of security flaws by the time even the next STS Ubuntu release is published 6 months later. And that would basically mean that any user who cares at least a little bit for the security of his operating system would be unlikely to use the Ubuntu chromium. I'd actually switch to Arch Linux completely in that case, since I don't want the Chrome compiled by Google and trying to find up to date PPAs or compiling myself appears to be more work than just fixing the occasional Arch breakage. The only sane thing any responsible distribution can do about chromium is to either NOT package it at all (this is what Fedora does), or ship the latest stable chromium at all times. If they just ship whatever was the latest chromium at the time of distro release, their users would be at risk and most users wouldn't even realize how dangerous it is to use the distro packaged browser. So yeah, this is a very difficult situation and I agree it's unfortunate that plugins have stopped working. However, this is not an experiment, it's a required security update. Just shipping chrome 34 without the fixes would be irresponsible and unprofessional, it's almost like still using Windows XP today. If you really want 34 back, I'd recommend you to start backporting all the security fixes from 35, 36 and 37 to version 34. Maybe Ubuntu would be willing to ship your 34 + backported fixes. Better ask them first. If you can't do that, you could pay someone to do it, but that will be pretty expensive I guess seeing how there are ~50-100 issues in chromium 34 to be fixed. :) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Well, I didn't push the update. I'm just a user... Then some ubuntu representative person *should* comment this bug. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
There is no way (or at least no way that does not involve forking chromium and quite a lot of coding work) to get chromium to work with Adobe Flash and have no security issues at the same time. Ubuntu decided to prefer breaking flash over having precise users exposed to a growing number of threats. This is simply because chromium no longer supports NPAPI on Linux as you have mentioned, but old chromium versions are a security hell. You have four options: 1) Use e.g. firefox + NPAPI Adobe Flash for your flash viewing pleasure. 2) Install Google Chrome (instead of chromium) that comes with bundled pepperflash. 3) Install pepperflash separatly (sudo apt-get install pepperflashplugin-nonfree) and use it with chromium. Please note that pepperflash DOES NOT AUTO UPDATE, even though it has critical security updates regularly. Use sudo update-pepperflashplugin-nonfree --status to see if there is an update available, and sudo update-pepperflashplugin-nonfree --install to install the update. 4) Don't use flash. Obviously that's not always an option, but some sites like youtube have HTML5 alternatives ready to be enabled. This is not a bug, it's the intended deprecation of an old plugin API. ** Changed in: chromium-browser (Ubuntu) Status: New = Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: Invalid Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
I'm sorry, you don't have option 3). Only after upgrading to Trusty. Pepperflash is not available in Precise. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: Invalid Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Not only Flash, but also Java stopped working... And it *is* a bug. It worked without problem before releasing that security update... Why on the earth you push update to stable LTS relase where is expected that everything will work after update which break more Flash and Java applications? For experiments there are development versions, but not long term support versions in middle of livecycle. ** Changed in: chromium-browser (Ubuntu) Status: Invalid = New -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working after last update Status in “chromium-browser” package in Ubuntu: New Bug description: Ubuntu released new version of chromium-browser (36.0.1985.125-0ubuntu1.12.04.0~pkg897) for LTS 12.04 precise relase. After updating chromium-browser from previous version (34.0.1847.116-0ubuntu~1.12.04.0~pkg884) flash plugin stopped working. Flash plugin is properly installed but it chromium does not see it and show message that is not installed. Firefox has no problem and can load flash object. I suspect that this is because of dropping NPAPI support in chrome 36. But ubuntu does not have pepper flash in repositories so it is not possible to use flash on 12.04 anymore. So this is critical problem because one month ago everything worked fine and new *broken* version of chromium-browser is in precise- security/universe archive. I suggest to revert chromium back to *working* version or do something else -- because new *security* update totally broke flash support on 12.04 LTS release. Once again 12.04 is LTS release where is expected that updates marked as security will *not* break existing application support -- this is not *experimental* update. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1359615/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
