RHSA-2010:0114: Critical: acroread security and bug fix update
Adobe Reader allows users to view and print documents in Portable DocumentFormat (PDF).This update fixes two vulnerabilities in Adobe Reader. Thesevulnerabilities are summarized on the Adobe Security Advisory APSB10-07page listed in the References section. A specially-crafted PDF file couldcause Adobe Reader to crash or, potentially, execute arbitrary code as theuser running Adobe Reader when opened. (CVE-2010-0186, CVE-2010-0188)This update also fixes a bug where, on some systems, attempting to installor upgrade the acroread packages failed due to a package dependency issue.(BZ#557506)All Adobe Reader users should install these updated packages. They containAdobe Reader version 9.3.1, which is not vulnerable to these issues andfixes this bug. All running instances of Adobe Reader must be restarted forthe update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0114?
The severity of RHSA-2010:0114 is classified as important due to potential exploits affecting Adobe Reader.
How do I fix RHSA-2010:0114?
To fix RHSA-2010:0114, users should update to the latest version of Adobe Reader available for their system.
Which software is affected by RHSA-2010:0114?
RHSA-2010:0114 affects the acroread and acroread-plugin packages specifically version 9.3.1-1.el5.
What vulnerabilities are addressed in RHSA-2010:0114?
RHSA-2010:0114 addresses two distinct vulnerabilities in Adobe Reader that could lead to remote code execution.
Is RHSA-2010:0114 relevant for all Adobe Reader users?
RHSA-2010:0114 is primarily relevant for users running Adobe Reader version 9.3.1-1.el5.