Slashdot Mirror

← Back to Stories (view on slashdot.org)

Adobe To Push Emergency Fix For Flash Bug

Posted by samzenpus on from the hurry-up dept.

Trailrunner7 writes "Adobe has moved up the release date for the patch for the critical bug in Adobe Flash Player revealed last week, and now plans to have an emergency fix ready on Thursday. The company still plans to patch Reader two weeks from now. The vulnerability in Flash also exists in Reader and researchers said last week that attackers had already begun exploiting the bug in Reader by the time that Adobe acknowledged the problem and published an advisory. At the time of the initial advisory, Adobe officials said they planned to release a patch for Flash on Nov. 9 and for Reader on Nov. 15."

8 of 78 comments (clear)

  1. Re:I have a question by Codename+Dutchess · · Score: 2, Informative

    I would imagine that there is a certain amount of testing with any software patch thats released.

  2. Re:I have a question by FranTaylor · · Score: 2, Informative

    It's good that they are doing it so often.

    It must cost them a small fortune every time.

    Hopefully someone there who signs checks is getting tired of it all and is pushing for changes.

  3. Too late by Anonymous Coward · · Score: 1, Informative

    I already replaced it with gnash and I am satisfied.

  4. Re:Don't care... by Anonymous Coward · · Score: 1, Informative

    Well if you really cared you could pass --safe-plugins to Chromium and sandbox Flash. It'll break some websites but YouTube works. Details: click. Linux details: click. On Linux the sandbox is using either chroot (SUID) or policies (AppArmor, SELinux, seccomp...).

  5. Flash forces McAfee on you by bubblegoose · · Score: 4, Informative

    The Flash updater annoyed me the last time I ran it. The last update I applied snuck some Mcafee software on to my machine.

    The flash updater now has the checkbox checked by default for mcafee security scan plus, and they moved the checkbox so you don't notice it when you are glancing at the installer.

    --
    I hope that someday we will be able to put away our fears and prejudices and just laugh at people. - Jack Handey
    1. Re:Flash forces McAfee on you by Anonymous Coward · · Score: 2, Informative

      Click to download, DONT accept their stupid "Download Assistant" and start clicking through the support pages...eventually you'll find the executables in the clear...

      http://kb2.adobe.com/cps/855/cpsid_85599.html

    2. Re:Flash forces McAfee on you by Tynin · · Score: 3, Informative

      The Flash updater annoyed me the last time I ran it. The last update I applied snuck some Mcafee software on to my machine.

      Thank you greatly for posting this. On my workstation I had an Adobe Flash Updater pop up on me in the last week or 2, I let it run and do it's thing. So, the next day at work I noticed Mcafee Security Scan (or some such) on my computer, I thought it was strange and even double checked that the corporate mandated Symantec was still installed and running. I just chalked it up to some manager deciding to inflict the masses with another ill conceived GPO push. I meant to question our helpdesk about it, but I glossed over it by the next day.

      They must have really snuck that checkbox in very well, I'm pretty diligent with my usual "is this software trying to push additional crapware on me" scan for checkboxes and didn't see it. I often expect them in pretty much everything these days (I'm looking at you Java), but I hadn't noticed the Flash Updater sneaking them in before.

  6. Where do I click .. by viralMeme · · Score: 2, Informative

    Where do I click to get 'infected`, besides there is no authplay.dll on my computer.

    "A critical vulnerability has been identified in Flash Player 10.1.85.3 and earlier versions for Windows, Macintosh, Linux and Solaris; Adobe Flash Player 10.1.95.2 and earlier versions for Android; and the authplay.dll component that ships with Adobe Reader 9.4 and earlier 9.x versions for Windows, Macintosh and UNIX" link

    Shockwave Flash 10.1 on Ubuntu 10.10 ..