Adobe Flash Player, AIR and Reader Critical Security Updates Released

[Corrine]

Adobe has released Version 19.0.0.207 of Adobe Flash Player for Microsoft Windows and Macintosh.  The Extended Release Version was incremented to Version 18.0.0.252 with this update.  Additional information is available in the Security Bulletin.

For those who use Adobe AIR, it has been updated to version 19.0.0.213.  The update is available here: https://get.adobe.com/air/

Non-IE Plugin (Opera, Firefox, Etc.):  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_19_plugin.exe
Flash Player For Internet Explorer, Windows 7 and earlier:  http://download.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_19_active_x.exe
Flash Player for Windows 8x and above will be available for IE and Microsoft Edge via Windows Update.



The quarterly Adobe Reader update was also released today, with extensive updates included.  Details are available in the Security Bulletin. 

Update checks can be manually activated by choosing Help > Check for Updates. 

    Adobe Reader XI (11.0.13, Pro and Standard) for Windows is available here: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows.

Note: UNcheck any pre-checked additional options presented with the update. They are not part of the software update and are completely optional.

[plodr]

I am having an impossible time getting a download for AIR. I click the link, then I click download and I get thrust to a page that has nothing to do with the download I want.

Then I search for "download Adobe AIR" on Adobe's site and get Results 1 - 20 of about 191000 which is ridiculous!
I'd remove it but in order to use the Jacquie Lawson card site, I need it installed.  :(
I tried on another computer and the Jacquie Lawson site won't work properly.

[winchester73]

I had no difficulty using IE 11. I'll try another browser on a different computer in the morning.

[Corrine]

I see what you mean plodr.  I uninstalled Adobe AIR a long time ago and haven't needed it.  Do you know what programs you have installed that require it?

[plodr]

Yes, I need it for the Jacquie Lawson website. I only have it on one computer because I can't send cards if I try to use any of the others.

I'll fire up IE and see if I can get to the correct page for the download.
I'll be back to post results in a few minutes.

[plodr]

Yes, I fired up IE 11 and finally got a different screen after I selected download. I saved the exe file then when I clicked to install it, it told me it would update from my previous 18.0.0.something version to 19.0.0.213.
THANKS!
I made a note on my Adobe AIR note card that I need to use IE to grab the update. Perhaps Adobe will fix this but I don't want to wait; I'd rather run a patched system.

[winchester73]

Glad you got it sorted out   ;)

[winchester73]

Flash already needs a new patch:  http://arstechnica.com/security/2015/10/new-zero-day-exploit-hits-fully-patched-adobe-flash/

If confirmed, it wouldn't be surprising to see Adobe publish an emergency update in the next few days.

[Corrine]

Apparently no update until next week:

Security Advisory for Adobe Flash Player             
Release date: October 14, 2015
Vulnerability identifier: APSA15-05
CVE number: CVE-2015-7645
Platforms: Windows, Macintosh and Linux
                     
Summary             
                                         
A  critical vulnerability (CVE-2015-7645) has been identified in Adobe  Flash Player 19.0.0.207 and earlier versions for Windows, Macintosh and  Linux. Successful exploitation could cause a crash and potentially allow  an attacker to take control of the affected system.

Adobe is aware of a report that an exploit for this vulnerability is  being used in limited, targeted attacks.  Adobe expects to make an  update available during the week of October 19. 

Adobe Security Bulletin

[ky331]

Flash 19.0.0.226 is now available, using the (same) links as Corrine provided in the first post of this thread.

[plodr]

Thanks! I've been holding off making images the four computers until flash was updated.
I guess they worked overtime to get this fixed.