Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Red Hat: RHSA-2013:1402-01 Critical: Adobe Reader Plugin Security

red hat
Calendar Grey October 2, 2013
Scroller Redhat
Red Hat users of Adobe Reader must note the software's upcoming end-of-life. We advise switching to alternative PDF solutions for secure and efficient document management
Updated acroread packages that disable the Adobe Reader web browser plug-in are now available for Red Hat Enterprise Linux 5 and 6 Supplementary

Solution

Red Hat advises users to reconsider further use of Adobe Reader for Linux, as it may contain known, unpatched security issues. Alternative PDF rendering software, such as Evince and KPDF (part of the kdegraphics package) in Red Hat Enterprise Linux 5, or Evince and Okular (part of the kdegraphics package) in Red Hat Enterprise Linux 6, should be considered. These packages will continue to receive security fixes.

Red Hat will no longer provide security updates to these packages and recommends that customers not use this application on Red Hat Enterprise Linux effective immediately.

Summary

Adobe Reader allows users to view and print documents in Portable Document Format (PDF). Adobe Reader 9 reached the end of its support cycle on June 26, 2013, and will not receive any more security updates. Future versions of Adobe Acrobat Reader will not be available with Red Hat Enterprise Linux.
The Adobe Reader packages in the Red Hat Network (RHN) channels will continue to be available. Red Hat will continue to provide these packages only as a courtesy to customers. Red Hat will not provide updates to the Adobe Reader packages.
This update disables the Adobe Reader web browser plug-in, which is available via the acroread-plugin package, to prevent the exploitation of security issues without user interaction when a user visits a malicious web page.

Topics%20covered

Topics Covered

security advisory security issue critical Red Hat Enterprise update recommendation Adobe Reader web browser plug-in

References

https://access.redhat.com/security/updates/classification#important

Package List

Red Hat Enterprise Linux Desktop Supplementary (v. 5):
i386: acroread-9.5.5-2.el5_10.i386.rpm acroread-plugin-9.5.5-2.el5_10.i386.rpm
x86_64: acroread-9.5.5-2.el5_10.i386.rpm acroread-plugin-9.5.5-2.el5_10.i386.rpm
Red Hat Enterprise Linux Server Supplementary (v. 5):
i386: acroread-9.5.5-2.el5_10.i386.rpm acroread-plugin-9.5.5-2.el5_10.i386.rpm
x86_64: acroread-9.5.5-2.el5_10.i386.rpm acroread-plugin-9.5.5-2.el5_10.i386.rpm
Red Hat Enterprise Linux Desktop Supplementary (v. 6):
i386: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
x86_64: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
Red Hat Enterprise Linux Server Supplementary (v. 6):
i386: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
x86_64: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
Red Hat Enterprise Linux Workstation Supplementary (v. 6):
i386: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
x86_64: acroread-9.5.5-1.el6_4.1.i686.rpm acroread-plugin-9.5.5-1.el6_4.1.i686.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2013:1402-01
Product: Red Hat Enterprise Linux Supplementary
Advisory URL: https://access.redhat.com/errata/RHSA-2013:1402.html
Issue date: 2013-10-02

Topic

Updated acroread packages that disable the Adobe Reader web browser plug-inare now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

Topics%20covered

Topics Covered

security advisory security issue critical Red Hat Enterprise update recommendation Adobe Reader web browser plug-in

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64

Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64

Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64

Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64

Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.