Adobe spurts spackle* into Flash’s gaping holes
Adobe has updated its Flash Player software ahead of schedule to head off crooks exploiting critical vulnerabilities uncovered in the product. The flaws were reported by Google’s security team.
The cross-platform upgrade includes new builds of Flash for Windows, Mac OS X, Linux and Android-powered smartphones. Adobe AIR on Windows and Mac OS X also needs updating due to a low-risk flaw. The patches tackle seven vulnerabilities in total, some of which are critical. Windows users are most at risk, but other platforms are far from unexposed.
Users of Flash Player for Windows and Mac should update to version 11.5.502.110, Linux folks should step up to 220.127.116.11, Android 4 phones should use 18.104.22.168 and Android 3 should switch to 22.214.171.124. Adobe AIR needs to be updated to version 126.96.36.1990.
As Sophos notes, there are separate downloads for Flash Player plugins, one for each web browser engine supported, a process that complicates the patching process. It also points out that Adobe tends to update its Flash player quarterly in line with the nearest Microsoft’s Patch Tuesday – but this time the Photoshop maker has lobbed out its security updates a week early.
Virus pushers and crooks seize upon security flaws in ubiquitous Adobe applications and Oracle’s Java, so it would be wise to apply the updates sooner rather than later. An advisory from Adobe on the updates can be found here. ®
* Polyfilla, for our non-US-speaking readers. In this case the American word seemed more colourful.