LandzDown Forum

Security => Security Alerts & Briefings => Topic started by: Corrine on October 13, 2015, 04:12:21 PM

Title: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: Corrine on October 13, 2015, 04:12:21 PM
Adobe has released Version 19.0.0.207 of Adobe Flash Player for Microsoft Windows and Macintosh.  The Extended Release Version was incremented to Version 18.0.0.252 with this update.  Additional information is available in the Security Bulletin (https://helpx.adobe.com/security/products/flash-player/apsb15-25.html).

For those who use Adobe AIR, it has been updated to version 19.0.0.213.  The update is available here: https://get.adobe.com/air/

Non-IE Plugin (Opera, Firefox, Etc.):  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_19_plugin.exe
Flash Player For Internet Explorer, Windows 7 and earlier:  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_19_active_x.exe
Flash Player for Windows 8x and above will be available for IE and Microsoft Edge via Windows Update.





The quarterly Adobe Reader update was also released today, with extensive updates included.  Details are available in the Security Bulletin (https://helpx.adobe.com/security/products/reader/apsb15-24.html). 

Update checks can be manually activated by choosing Help > Check for Updates. 

    Adobe Reader XI (11.0.13, Pro and Standard) for Windows is available here: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: plodr on October 13, 2015, 11:41:47 PM
I am having an impossible time getting a download for AIR. I click the link, then I click download and I get thrust to a page that has nothing to do with the download I want.

Then I search for "download Adobe AIR" on Adobe's site and get Results 1 - 20 of about 191000 which is ridiculous!
I'd remove it but in order to use the Jacquie Lawson card site, I need it installed.  :(
I tried on another computer and the Jacquie Lawson site won't work properly.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: winchester73 on October 13, 2015, 11:44:27 PM
I had no difficulty using IE 11. I'll try another browser on a different computer in the morning.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: Corrine on October 14, 2015, 12:13:33 AM
I see what you mean plodr.  I uninstalled Adobe AIR a long time ago and haven't needed it.  Do you know what programs you have installed that require it?
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: plodr on October 14, 2015, 03:06:24 AM
Yes, I need it for the Jacquie Lawson website. I only have it on one computer because I can't send cards if I try to use any of the others.

I'll fire up IE and see if I can get to the correct page for the download.
I'll be back to post results in a few minutes.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: plodr on October 14, 2015, 03:16:25 AM
Yes, I fired up IE 11 and finally got a different screen after I selected download. I saved the exe file then when I clicked to install it, it told me it would update from my previous 18.0.0.something version to 19.0.0.213.
THANKS!
I made a note on my Adobe AIR note card that I need to use IE to grab the update. Perhaps Adobe will fix this but I don't want to wait; I'd rather run a patched system.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: winchester73 on October 14, 2015, 01:34:40 PM
Glad you got it sorted out   ;)
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: winchester73 on October 14, 2015, 05:41:27 PM
Flash already needs a new patch:  http://arstechnica.com/security/2015/10/new-zero-day-exploit-hits-fully-patched-adobe-flash/

QuoteIf confirmed, it wouldn't be surprising to see Adobe publish an emergency update in the next few days.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: Corrine on October 14, 2015, 10:38:27 PM
Apparently no update until next week:

QuoteSecurity Advisory for Adobe Flash Player             
Release date: October 14, 2015
Vulnerability identifier: APSA15-05
CVE number: CVE-2015-7645
Platforms: Windows, Macintosh and Linux
                     
Summary             
                                         
A  critical vulnerability (CVE-2015-7645) has been identified in Adobe  Flash Player 19.0.0.207 and earlier versions for Windows, Macintosh and  Linux. Successful exploitation could cause a crash and potentially allow  an attacker to take control of the affected system.

Adobe is aware of a report that an exploit for this vulnerability is  being used in limited, targeted attacks.  Adobe expects to make an  update available during the week of October 19. 

Adobe Security Bulletin (https://helpx.adobe.com/security/products/flash-player/apsa15-05.html)
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: ky331 on October 16, 2015, 11:38:50 AM
Flash 19.0.0.226 is now available, using the (same) links as Corrine provided in the first post of this thread.
Title: Re: Adobe Flash Player, AIR and Reader Critical Security Updates Released
Post by: plodr on October 16, 2015, 02:01:53 PM
Thanks! I've been holding off making images the four computers until flash was updated.
I guess they worked overtime to get this fixed.