Red Hat Security Advisory: flash-plugin - 1-Month End Of Life Notice
Affects Red HatSource GCVE Database
Mentioned vulnerabilities
End of life, no fix coming : replace or isolate Red Hat; no fix will be released.
Data as of 13 Nov 2026, 18:37 UTC
Rated by Threat Radar
- Patch
- None coming – the product is end of life
What to do
No fix will be released: Red Hat is end of life. Replace it, or isolate it from untrusted networks until you can.
AI-suggested
Red Hat plans to release an update that disables the flash-plugin package to prevent its use and mitigate the risk. Users are advised to apply this update when available. Continuing to use Flash Player 9 is strongly discouraged due to the critical vulnerabilities and lack of security updates. Users who choose to continue using the plugin despite the risks can add the flash-plugin package to the up2date skip list following Red Hat's knowledgebase instructions, but this is not recommended.
Description
Adobe Flash Player 9, used via the flash-plugin package for Mozilla Firefox on Red Hat Enterprise Linux 4, contains multiple critical security vulnerabilities that allow remote attackers to execute arbitrary code with user privileges. Adobe no longer provides security updates or a compatible replacement for Flash Player 9 on this platform. Red Hat plans to release an update that disables the flash-plugin package to mitigate these risks.
References
- access.redhat.com/errata/RHSA-2011:0259 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- kb2.adobe.com/cps/406/kb406791.html (opens in a new tab)
- access.redhat.com/kb/docs/DOC-1639 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=676226 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0259.json (opens in a new tab)