Adobe relieves Reader and Acrobat update blues
Plus fixes for 29 security bugs
Adobe Systems has introduced a new software updater for its Reader and Acrobat applications, one of several additions released Tuesday to protect users against a growing wave of malware attacks.
The new updater was included in in the latest versions of Reader and Acrobat, which Adobe released to fix almost 30 security vulnerabilities, at least one of which was already being targeted in limited attacks. For the time being, the feature will undergo testing in a closed beta program. Eventually, it will be rolled out to all users.
"The purpose of the new updater, once it is active, is to keep end-users up-to-date in a much more streamlined and automated way," Adobe's Steve Gottwals wrote here in announcing the addition.
The pilot should come as welcome news to anyone who has spent time toiling with the current updater. Under the best of cases, it checks only once every seven days to see if there's a new version of Reader, which is entirely inadequate given the frequency and ferocity of many exploits targeting the app. And even then the system, for reasons that still aren't clear, often fails to alert users when a new release is available.
The changes were introduced during Adobe's second quarterly update for Reader. The company implemented the regularly scheduled update routine to give admins more time to plan the patching of large fleets of machines. To make life easier, it coincides with Microsoft's Patch Tuesday.
In all, Tuesday's release fixed 29 security vulnerabilities, many of which Adobe rated as critical because they could be used to take control of vulnerable machines. While Reader and Acrobat for Windows was the only version that was under limited attack, Adobe warned many of the remote code execution flaws existed on the programs for Max OS X and Unix.
Updates for all platforms are here. For those who don't like excess software bloat, don't forget to uncheck the option to automatically download McAfee Security Scan. ®
Sponsored: Network DDoS protection