Forgot your password?

typodupeerror
Security IT

Adobe May Change To Monthly Patch Cycle 76

Posted by timothy
from the are-you-on-the-patch? dept.
Trailrunner7 writes "Adobe, which has been under fire for the security of its flagship products, Flash and Reader, for some time now, may be on the verge of changing its patching process to push fixes out on a monthly schedule, which would coincide with Microsoft's monthly Patch Tuesday releases. The change would be the second major adjustment to Adobe's patching process in the last year or so. In 2009 the company moved to a scheduled quarterly patch release process in an effort to give its customers a better chance to plan for testing and deployment. That change was generally well-received. Now Adobe may change the schedule again in order to get patches out more quickly. The company is considering releasing its security fixes for Reader on a monthly schedule, the same day that Microsoft releases its patches."
This discussion has been archived. No new comments can be posted.

Adobe May Change To Monthly Patch Cycle

Comments Filter:
  • by Silly Man (15712) on Thursday May 27 2010, @03:43PM (#32367018) Homepage Journal

    But will they stop placing that stupid icon on our desktop during every single update?!

  • Great! (Score:3, Insightful)

    by leonardofelin (1211778) on Thursday May 27 2010, @03:46PM (#32367068)

    Now I won't know whose patch messed up my computer after the update...

  • by AriesGeek (593959) <<aries> <at> <ariesgeek.com>> on Thursday May 27 2010, @03:47PM (#32367098) Homepage Journal
    Seriously, Adobe, why do I have to reboot after updating your damn user-land software? I can even install some OS patches without rebooting!
  • Re:Great! (Score:4, Insightful)

    by NevarMore (248971) on Thursday May 27 2010, @03:51PM (#32367160) Homepage Journal

    Thats the idea, its called "the blame game" and it cuts down on support costs.

  • stop using adobe (Score:2, Insightful)

    by fatbuckel (1714764) <fatbuckel1@gmail.com> on Thursday May 27 2010, @03:56PM (#32367220)
    stop using adobe.
  • by Anonymous Coward on Thursday May 27 2010, @04:07PM (#32367386)

    Hey !! Adobe !, if you insist on following Microsoft's example of distributing crappy software with even more crappier default settings, then please arrange we can update the crap via WSUS as well. your own distribution tools S U C K !

  • Full installer (Score:3, Insightful)

    by Nimey (114278) on Thursday May 27 2010, @04:07PM (#32367388) Homepage Journal

    How about releasing a full installer of the latest revision, instead of this idiocy where we have to download 9.3.0 from their website and then manually tell it to install 9.3.2? It can't be /that/ hard.

  • by JaCKeL 1.0 (670980) on Thursday May 27 2010, @04:13PM (#32367492)
    I am an IT and these update are PAIN IN THE ASS. Personally, I am tired of updating every single piece of software I use individually BUT it is very bad for my customers. 1. Most of them include crap like Norton scan, toolbars and other badware. 2. The majority of my customers require older version for their manufacturer system to work (old java, old acrobat reader, IE7 or less, ...) so when they do update (because they are harassed to do it) their software stop working. After that they are afraid to update anything and they become a security risk. 3. The frequency of theses updates are so high it just get people mad. 4. Why do we need to reboot for a software update, we're in 2010. Can't Microsoft put their foot down and ask anybody who want to do update to work with them ?
  • by haplo21112 (184264) <haplo&epithna,com> on Thursday May 27 2010, @04:38PM (#32367920) Homepage

    Adobe patches are crap in general.
    1. They usually take the form of nearly complete product updates, patches 80% of the size of the installed product are common.
    2. They currently only rarely issue roll-ups so you end up in the you have to have 9.3.1 base, then install 9.3.2 patch , then install 9.3.3 patch can't jump from 9.3.1 directly to 9.3.3

    This sort of stuff drives the guy at my company in change of Adobe software deployments insane. For a new machine install it takes forever as each individual patch is installed by the software deployment system.

  • by Pharmboy (216950) on Thursday May 27 2010, @04:58PM (#32368196) Journal

    Can't Microsoft put their foot down and ask anybody who want to do update to work with them ?

    Oh yea, MS should put their foot down and tell them "if you want your 3rd party program to be installed on customer's computers, you have to go through us. No more 3rd party applications installed unless it is through us or at least done our way". No, that wouldn't perk up the DOJ. And I'm sure that everyone on /. and every other blog would say "yes, that sounds like a good idea".

    Once they did that, the thread on /. would have 1000 comments in less than an hour bashing "Teh Micr0$ucks!"

  • by Anonymous Coward on Thursday May 27 2010, @05:13PM (#32368416)
    And every other full install on the planet can ask if I want a desktop icon except Adobe?
  • by PsychoSlashDot (207849) on Thursday May 27 2010, @10:56PM (#32371584)

    You know you suck when your company is playing catchup with Microsoft on security and patching.

    Seriously. I don't like to swear much on Slashdot, but I'd like to tell Adobe "fuck you!"

    This isn't about an operating system. It isn't even about a productivity suite like Office. It's a reader. Stop patching every damned month and secure the bastard. Right now. One patch and you're done. I do not condone any corporate plan to regularly trickle out tiny fixes here and there when they're discovered because that's Good Enough. It's not good enough.

    Adobe needs to change their product plan.

    Adobe Reader - views PDFs and that's it
    Adobe Reader Pro - views PDFs, has all the scripting and form-filling features that are vulnerable and buggy
    Adobe Acrobat - makes PDFs

    Strip Reader down to as few features as possible. We know that 99% of what Reader is used for is flat basic text reading. So either make a product that does that and only that, or at least make a MODE where turning on all the other features for X minutes requires a UAC-style prompt.

Computer programmers do it byte by byte.

Working...