Downloading and deploying Adobe Flash Player 16.0.0.296

Over the weekend of January 24th, Adobe released Adobe Flash Player 16.0.0.296 to fix a critical vulnerability. This update was available for installation via the Flash auto-update, but there was nothing available for a manual download. This lack of a separate download meant that Mac admins didn’t have a way to get an installer for distribution to the Macs in their environments.

Adobe has stated that a manual download will be available during the week of January 26, but for the moment, it appears that the auto-update mechanism is the only way Adobe is distributing this update.

Fortunately, thanks to research by Greg Neagle and Per Olofsson, there appears to be a way to leverage AutoPkg to generate the needed installer package. See below the jump for details.

---

Update 1-26-2015: A 16.0.0.296 installer is now available on the Adobe Flash Player Distribution site (not linked because you gain access to the site after getting a valid Adobe Flash Player Distribution License Agreement in place.)

---

---

Update 2 – 1-26-2015: The AutoPkg download recipe for Adobe Flash has been updated to now download and decode the install_all_mac_pl_sgn.z file from Adobe’s Flash Player update feed for Macs. If you’re using AutoPkg, update your repos and you should get the changes. For more information on the actual recipe changes, see here.

---

Pre-requisites:

• AutoPkg
• The recipes repo from the AutoPkg GitHub repo

Adobe’s desktop auto-updater is downloading the following file:

http://fpdownload2.macromedia.com/get/flashplayer/update/current/install/install_all_mac_pl_sgn.z

The install_all_mac_pl_sgn.z file is an ASN.1-encoded file, which can be downloaded via a web browser or by using curl:

curl http://fpdownload2.macromedia.com/get/flashplayer/update/current/install/install_all_mac_pl_sgn.z > /path/to/install_all_mac_pl_sgn.z

Once downloaded, it needs to be converted to a readable disk image file using the security command:

security cms -D -i /path/to/install_all_mac_pl_sgn.z > /path/to/install_all_mac_pl.dmg

Once the disk image file is available, it can be used as a source by AutoPkg recipes. This option is available via the -p or –pkg option for AutoPkg’s run function.

To create an Adobe Flash Player 16.0.0.296 installer package, run the following command:

autopkg run AdobeFlashPlayer.pkg -p /path/to/install_all_mac_pl.dmg

You should also be able to substitute other AdobeFlashPlayer recipes as well. Greg was able to add Adobe Flash Player 16.0.0.296 to his Munki repo with the AdobeFlashPlayer.munki recipe and I verified that I could upload Adobe Flash Player 16.0.0.296 to my Casper server:

autopkg run AdobeFlashPlayer.jss -p /path/to/install_all_mac_pl.dmg