Critical Adobe and Java patches

February 27, 2013

On February 20, 2013, Adobe released patches for critical vulnerabilities in Adobe Reader and Acrobat. Oracle has also recently released patches for critical vulnerabilities in Java.

Adobe Acrobat and Reader patches

Adobe released patches for versions 9, 10 and 11 of Adobe Reader and Adobe Acrobat for Windows and Macintosh, and patches for Adobe Reader 9 for Linux.

If you are already using Adobe Reader or Adobe Acrobat, you can install the updates by opening the application and selecting:

Help > Check for Updates.

Follow the given instructions to download and install updates for your Adobe products.

Alternatively, to install or upgrade any version of Adobe Reader 10 on Windows to the latest version (10.1.6), you can run the installer on MONOLITH at:

PC_Dist\Adobe\Acrobat Reader\10.1.6\SCS-AdobeReader-All-1016.exe

To install or upgrade any version of Acrobat Pro 10 on Windows to the latest version (10.1.6), you can run the installer on MONOLITH at:

PC_Dist\Adobe\Acrobat Pro\10.1.6\SCS-AdobeAcrobatPro-All-1016.exe.

To install the latest version of Adobe Reader 9 or upgrade an existing Adobe 9 installation on Windows to the latest version (9.5.4), you can run the installer on MONOLITH at

PC_Dist\Adobe\Acrobat Reader\9.5.4\SCS-AdobeReader-All-954.exe

Additional information about this update is at:

http://www.adobe.com/support/security/bulletins/apsb13-07.html

Java update

NOTE: If you are using a web application or other software that requires a specific version of Java, such as CMU's Oracle Financials system, you should NOT update the version of Java you are using.

If you do NOT need to use a specific version of Java, then you can visit:

https://www.cmu.edu/iso/patch-check/

for information on updating your browser software.

If you are using Java on Ubuntu, see:

http://www.cs.cmu.edu/~help/unix_linux/ubuntu_java.html

for information on installing/upgrading Java.

On Facilitized Fedora hosts (F7 and higher), the default version of Java in /usr/local will be upgraded to the most recent patched version of Java 7 by the end of this week (March 1).

If you do not need to use Java in a browser, it is recommended that you disable it. Instructions for doing so are at:

https://www.java.com/en/download/help/disable_browser.xml

Please contact help@cs.cmu.edu or call the SCS Help Desk (x8-4231) if you have questions or problems with applying these patches.

Thank you for your attention,

SCS Help Desk