[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-08-06 Thread Marc Deslauriers
acroread in the partner repo is now at 9.1.3 for hardy, intrepid, jaunty. Marking this bug as closed. ** Changed in: acroread (Ubuntu) Status: Confirmed = Fix Released -- remote code execution vuln in adobe reader - disable javascript by default https://bugs.launchpad.net/bugs/371954

[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-05-24 Thread Avi Schwartz
Please make this update available via the repository. Many if not most users will not update unless it is available via the update manager. -- remote code execution vuln in adobe reader - disable javascript by default https://bugs.launchpad.net/bugs/371954 You received this bug notification

[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-05-23 Thread NoOp
Updates are available from Adobe for 9.1.1: http://www.adobe.com/support/downloads/product.jsp?product=10platform=Unix Can this not be enabled in the repository for update? It's been available since May 12: http://www.adobe.com/support/downloads/detail.jsp?ftpID=4454 Adobe Reader 9.1.1 Linux

[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-05-12 Thread Jamie Strandboge
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2009-1492 -- remote code execution vuln in adobe reader - disable javascript by default https://bugs.launchpad.net/bugs/371954 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct

[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-05-06 Thread Kees Cook
** Changed in: acroread (Ubuntu) Importance: Undecided = High ** Changed in: acroread (Ubuntu) Status: New = Confirmed -- remote code execution vuln in adobe reader - disable javascript by default https://bugs.launchpad.net/bugs/371954 You received this bug notification because you

[Bug 371954] Re: remote code execution vuln in adobe reader - disable javascript by default

2009-05-04 Thread Mark Painter
** Attachment added: example diff for disabling javascript in reader_prefs from debian/rules http://launchpadlibrarian.net/26331000/acroread_8.1.2.su1-0.0medibuntu0.8.04.1-javascript-vuln.diff -- remote code execution vuln in adobe reader - disable javascript by default