CRITICAL

July 30, 2009
Security Bulletin Posted for Adobe Flash Player
A Security Bulletin has been posted in regards to the Adobe Flash Player issues last mentioned in the Adobe PSIRT blogs on July 28 ("Impact of Microsoft ATL vulnerability on Adobe Products", CVE-2009-0901, CVE-20092395,
CVE-2009-2493) and July 22 ("Update on Adobe Reader, Acrobat and Flash Player Issue", CVE-2009-1862). Adobe categorizes these as critical issues and recommends affected users patch their installations.
http://blogs.adobe.com/psirt/

Security updates available for Adobe Flash Player
Release date: July 30, 2009

Critical vulnerabilities have been identified in the current versions of Adobe Flash Player (v9.0.159.0 and v10.0.22.87) for Windows, Macintosh and Linux operating systems. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.

We expect to provide an update for Adobe Reader and Acrobat v9.1.2 for Windows, Macintosh and UNIX by July 31, 2009. This bulletin will be updated to reflect their availability on that date. (The update for Adobe Flash Player v9 and v10 for Solaris is still pending.)

Adobe recommends users of Adobe Flash Player 9.x and 10.x and earlier versions update to Adobe Flash Player 9.0.246.0 and 10.0.32.18. Adobe recommends users of Adobe AIR version 1.5.1 and earlier versions update to Adobe AIR 1.5.2.

Bulletin:
http://www.adobe.com/support/security/bull.../apsb09-10.html

All Systems/Browsers Downloads:
http://www.adobe.com/shockwave/download/alternates/#sp

Shockwave was just recently updated too - don't forget to grab it!