Patch Tuesday: Adobe outdoes Microsoft, swats 18 bugs in latest update

  • 14 May 2014
  • 1 reply
  • 2 views

Userlevel 7

Flash, Illustrator, IE and Windows all receive fixes

By Shaun Nichols, 13 May 2014  Administrators and end users are being advised to update their systems following a set of Patch Tuesday releases from Microsoft and Adobe, which address more than 30 security flaws combined.
 
Adobe said that its monthly update will include patches for its Flash, Reader, and Acrobat platforms, as well as an update for Illustrator. In total, the update will remedy 18 common vulnerabilities and exposures (CVE) security flaws.
 Six of the flaws are addressed in an update for the Windows, Linux, and OS X versions of Flash Player and Air SDK. The company said that the update includes fixes for critical flaws that could allow remote code execution, and updating Flash Player should be a top priority for users and administrators.
 
Adobe credited the discovery of four of the flaws to Contextis reseacher James Forshaw. Researchers with Keen Team and Team 509 via HP Zero Day Initiative (ZDI) received credit for unearthing another flaw, while Masato Kinugawa was credited with discovery of one vulnerability.
 
 
 
Full Article
 
Hard to believe that another company could do MS when it came to number of patches releases...so does that mean MS is getting better...or that the rest are gett?ng worse? ;)

1 reply

Userlevel 7
The follownig article is a update on Adobe patches

(Everyone taking part in Patch Tuesday step forward. NOT SO FAST, Adobe!)

 
By Shaun Nichols, 9 Sep 2014
 
Adobe has pushed back the release date for a planned security fix in Acrobat and Reader.
The company said that the patch for both Windows and OS X versions of Reader and Acrobat due for tomorrow will instead arrive next week. The delay will give the company time to iron out problems spotted during testing, the company said in its announcement of the shift.
 Adobe says the update, when it finally arrives, is a top deployment priority for both Windows and OS X users. The company said that the flaws, which have not yet been detailed for obvious reasons, included 'critical' vulnerabilities, a designation usually reserved for flaws which allow an attacker to remotely execute code without notification.
As it stands, users could be vulnerable for another week or more as the company looks to get the issue sorted so the patches can be deployed.
No worries, Adobe. It isn't as if Reader and Acrobat aren't already two of the most common targets for attacks or anything.
 
 
The Register/ full article here/ http://www.theregister.co.uk/2014/09/09/everyone_taking_part_in_patch_tuesday_step_forward_not_so_fast_adobe/

Reply