Does Debian provide updates for the Iceweasel plugin Flash at all? Are they not automatically provided?
The issue with Debian is when.
You can download the latest Shockwave version, 18.104.22.1686 from here. Choose the
Create an empty directory, move the downloaded
.tar.gz file into it and unpack:
tar -xzf install_flash_player_11_linux.x86_64.tar.gz
Which should leave you a directory tree starting with
readme.txt and a
libflashplayer.so. The latter is what you are really after.
Find your current version, possibly:
find ~/.mozilla libflashplayer.so
You want to replace that with the one from the tarball. If it is not found, there should be a
~/.mozilla/plugins/ directory. Shut down Iceweasel and copy
libflashplayer.so into that directory. Start it up and check the version again, you should be using the newest one.
You can keep the
.tar.gz file but delete the rest of the stuff unpacked from within it; it is not needed.
Chrome uses its own version of the flash player that is supposedly updated with Chrome, but there doesn't seem to be another way, and my version is still 22.214.171.124 here (which is also vulnerable, the chrome "pepperplayer" versions are different). However, Chrome on Linux will pick up the
~/.mozilla/plugins one and if you navigate to
chrome://plugins you'll see two under "Adobe Flash Player". The first one will probably be "Version: 126.96.36.199" and in an
/opt/google/chrome directory, you can disable that and fall back on the
~/.mozilla one until it is upgraded.