[Update - critical security] 2015-12-10

Netrunner Rolling Rolling 2016.01
1

This is a critical security update for Chromium (rebuilt as 47.0.2526.79-11), and flashplugin (fast tracked directly).

Original security advisories:

Quote from: Arch Linux Security Advisory ASA-201512-5

Quote from: Arch Linux Security Advisory ASA-201512-7

Please update as soon as your mirror syncs:

sudo pacman -Syyu
2

Trying to upgrade my system through pacman -Syyu, I get the following warning:

warning: flashplugin: local (11.2.202.548-1) is newer than extra (11.2.202.442-1)

along with an update for the package netrunner-desktop-containment-5.4.3-1-x86_64.

The package netrunner-desktop-containment-5.4.3-1-x86_64 upgraded correctly but the warning for flashplugin is still there. Do I need to downgrade the package to the one in the repos? If so, how do I do that?

3

No don’t downgrade, this update was from upstream.
I’m not exactly sure what’s going on there ATM, but so far it looks like only the 32 bit packages got updated.
Hopefully this will get sorted out soon.
https://forum.manjaro.org/index.php?topic=28989.0;topicseen

4

OK, seems some of the mirror are just syncing slower than others.
You could try grabbing this package directly from the main overlay:

sudo pacman -U http://repo.manjaro.org.uk/pool/overlay/flashplugin-11.2.202.554-1-$(uname -m).pkg.tar.xz
5

OK, their overlay is messed up ATM.
However the main mirror seems to be correct.
Use this for now:

sudo pacman -U http://repo.manjaro.org.uk/stable/extra/$(uname -m)/flashplugin-11.2.202.554-1-i686.pkg.tar.xz

Otherwise you need to wait for the other mirrors catch up.

6

Thank you! Will report if I run into any problems.

7

I tried the above and got this error message:

When I went to the site, I saw that the package was named

flashplugin-11.2.202.554-1-x86_64.pkg.tar.xz

Should the command have been:

sudo pacman -U http://repo.manjaro.org.uk/stable/extra/$(uname -m)/flashplugin-11.2.202.554-1-$(uname -m).pkg.tar.xz
8

Oops sorry, yes that will work as well as changing it to -x86_64, either way.

9

Before trying this command, I tried pacman -Syu and the package flashplugin-11.2.202.554-1 got updated on its own. I guess the sync issues have been resolved.

10

Yes, they have. The developer that pushed these packages was having some issues with his system, these have now been fixed.