Bugzilla – Bug 618212
Adobe Reader (acroread) on Factory: Update to security-fixed version
Last modified: 2010-07-21 06:53:13 UTC
User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 Note: This is for the openSUSE Factory version, i.e. http://download.opensuse.org/factory/repo/non-oss/suse/i586/ which currently ships 9.3.2 - and for which to my knowledge the normal package maintainer is responsible. (For the released products, the security team is responsible - and I assume they are already waiting for Adobe to release the update.) Today, a security update for Adobe Reader 9.3.2 will be released, which fixes several critical security problems, in particular CVE-2010-1297 (crash and potentially allows an attacker to take control of the affected system). This is the Adobe Reader fix for an issue which is already exploited for Flash Player (fixed for Factory & released products). Security advisory: http://www.adobe.com/support/security/bulletins/apsb10-15.html Thanks for the timely security update! Reproducible: Always
The update is (now) available at http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Unix As the openSUSE 11.3 release is happening soon, I would really like to see this update be included also on the DVDs.
Or from the FTP server: ftp://ftp.adobe.com/pub/adobe/reader/unix/9.x/9.3.3/ Release notes (http://kb2.adobe.com/cps/837/cpsid_83708.html): - Enhancements for security (including a zero-day fix) - performance enhancements - bug fixes - improved browser support, - and Updater improvements. Details: http://kb2.adobe.com/cps/837/cpsid_83708/attachments/Acrobat_Reader_ReleaseNote_9.3.3_8.2.3.pdf
Hi, Download it now, thanks! It's a little slow to download it, I'll finish it tomorrow.
Assign to me first.
redhat has released updates
It was built success, and I'm just downloading it for test. https://build.opensuse.org/package/binary?arch=i586&filename=acroread-9.3.3-9.1.i586.rpm&package=acroread&project=home%3ABinLi%3Abranches%3Ahome%3Ahennevogel%3ATODO&repository=openSUSE_Factory
Done. And already accepted by factory.
REOPEN (reminder: 9.3.3 = new, 9.3.2 = old) The files are still not on the FTP server: http://download.opensuse.org/factory/repo/non-oss/suse/i586/ has only acroread-9.3.2-1.5.i586.rpm The files are available for 11.3 http://download.opensuse.org/distribution/11.3/repo/non-oss/suse/i586/ has acroread-9.3.3-2.1.i586.rpm If one looks at the build server, one finds the 9.3.3 package - thus, this is not a package building but a package distribution problem. https://build.opensuse.org/package/show?package=acroread&project=openSUSE%3AFactory%3ANonFree
Now the package is finally available on Factory. Thus, close as fixed. http://download.opensuse.org/factory/repo/non-oss/suse/i586/ has acroread-9.3.3-1.1.i586.rpm 02-Jul-2010 17:14