RHSA-2010:0037: Critical: acroread security and bug fix update
Adobe Reader allows users to view and print documents in Portable DocumentFormat (PDF).This update fixes several vulnerabilities in Adobe Reader. Thesevulnerabilities are summarized on the Adobe Security Advisory APSB10-02page listed in the References section. A specially-crafted PDF file couldcause Adobe Reader to crash or, potentially, execute arbitrary code as theuser running Adobe Reader when opened. (CVE-2009-4324, CVE-2009-3953,CVE-2009-3954, CVE-2009-3955, CVE-2009-3959, CVE-2009-3956)This update also fixes the following bugs: the acroread process continued to run even after closing a PDF file. If multiple PDF files were opened and then closed, the acroread processescontinued to run and consume system resources (up to 100% CPU usage). Withthis update, the acroread process correctly exits, which resolves thisissue. (BZ#473217) the PPKLite.api plug-in was missing, causing Adobe Reader to crash when attempting to open signed PDF files. For such files, if an immediate crashwas not observed, clicking on the Signature Panel could trigger one. Withthis update, the PPKLite.api plug-in is included, which resolves thisissue. (BZ#472975) Adobe Reader has been upgraded to version 9.3. (BZ#497957) Adobe have discontinued support for Adobe Reader 8 for Linux. All users ofAdobe Reader are advised to install these updated packages, which containAdobe Reader version 9.3, which is not vulnerable to these issues and fixesthese bugs. All running instances of Adobe Reader must be restarted for theupdate to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0037?
RHSA-2010:0037 addresses critical vulnerabilities in Adobe Reader that could potentially allow remote code execution.
How do I fix RHSA-2010:0037?
To fix RHSA-2010:0037, update Adobe Reader to the latest version by applying the security patches provided in the advisory.
What software is affected by RHSA-2010:0037?
The affected software for RHSA-2010:0037 includes Adobe Reader version 9.3-1.el5 and the acroread-plugin version 9.3-1.el5.
What vulnerabilities are included in RHSA-2010:0037?
RHSA-2010:0037 includes multiple vulnerabilities that allow for potential exploitation, as summarized in the Adobe Security Advisory APSB10-02.
Is there a workaround for RHSA-2010:0037?
There are no recommended workarounds for RHSA-2010:0037; applying the updates is the only solution.