Time to install the Adobe Flash patch – and the Reader patches, too, when they’re out

Topic

New Reply

It looks like the Flash player update is relatively stable. Go ahead and install it. (But you have my permission to curse under your breath that Adobe
[See the full post at: Time to install the Adobe Flash patch – and the Reader patches, too, when they’re out]

Reply | Quote

Replies

Problem:I went to the link. 2nd time that I have been unable to find the suggested Firefox location to “Add to list” of OK sites. Other way I was unsuccessful: when prompt appeared to apply patch (after turning on computer), I clicked on, but it never completed — no doubt due to Firefox…

Reply | Quote

My Flash Player on my Windows 7 laptop automatically updated itself (something I would like to switch off). But as of today, no Adobe Reader update shows up. I have version 9.3.3, set to notify but not install updates. I am still waiting for this patch to come through.

Reply | Quote

Update: I got impatient and went directly to Adobe and downloaded and manually installed Adobe Reader 9.3.4. I suggest others consider doing this also. It’s a very quick update once it is downloaded.

Reply | Quote

Adobe Reader 8.2.4 and 9.3.4 patches are now available Thursday afternoon of August 19.

Reply | Quote

My Windows XP 32-bit laptop with Firefox was an entirely different story. Firefox would not update its Flash Player plug-in. The issue seemed to be a failure to go into the Folder and removed the older Flash Plug-in file(s). I had the same issue before in Firefox, and always wondered why this plug-in never seemed to clean up its older versions. Well, now I know.

For IE, you need to use the Adobe Flash Player Removal Tool, as the Active-X Control is locked.

Once the old file was deleted, the new installer worked just fine. This is a once-only operation, as Flash Player does not install itself into each Firefox user’s Profile like a standard FF Plug-in.

And do yourselves a favor, folks — download Flash Player from Filehippo, and avoid the insecure Adobe Download Helper. That Helper is listed by Secunia as a “backdoor” type of security threat. Filehippo does not use the Adobe DLM, and the DLM should be removed with great prejudice (use Revo Uninstaller) if you have it on your computer.

Reply | Quote

The Folder Name got zapped in my comment. It is (for Firefox Flash Player)

C://Windows/System32/Macromed/Flash

And there are several associated files, none of which is a significant issue.

Reply | Quote

next time, rc primak, read guest’s latest comments from here.

like with woody advising people to shut off Windows automatic updates, do the same with Adobe Flash Player and disable its auto update feature.

Reply | Quote

@EP —

You misunderstood my comments. By “got zapped”, I was only referring to my link url.

What I am pointing out is NOT that automatic Updates were enabled (which they were NOT). But there is this Adobe Download Manager which if you go MANUALLY to update Adobe Flash or Shockwave Players, insists on installing itself and running before you can get the REAL Flash Player Updates. The issue has been referenced in the Windows Secrets Newsletter several times.

Filehippo does not download or run this insecure Download Manager when giving us the current Flash Player Updates. This is why I posted that tip.

And, for Firefox, this browser does not remove the old Flash Player plug-in to allow the new one to install by any method. Thus my instructions about manual removal of the older versions.

On my Windows 7, 64-bit laptop I run Google Chrome. Chrome does not give me a choice — it updates itself and its Flash Plug-in automatically. I have not seen any Manual Updates option in Chrome.

On the other hand, Chrome has not yet given me any bad updates.

Reply | Quote

And on a related subject, Adobe has not yet posted this on its shockwave test and download pages, but Filehippo has available for download, the new security update, Shockwave Player 11.5.8.r612 . Get it before the bad guys get you. This one is getting a lot of tech press attention.

Reply | Quote

@ rc

Yes, I have been complaining about that for a while to Adobe.

It is poor that companies do not update their info & websites on a timely basis. It is a poor reflection on Adobe when an outside website (Filehippo) posts ADOBE’s own updates quicker.

Glad to see you like Filehippo. Some users however feel more comfortable “going to the source” for downloads like this and Adobe finally does have “Adobe Shockwave Player version 11.5.8.612” (slim version) posted:
http://get.adobe.com/shockwave/

****************************************

The “Test Adobe Shockwave Player” page (http://www.adobe.com/shockwave/welcome/) has NEVER shown info about the latest version of Shockwave on it, so users can NOT compare their version number …

I just complained again to Adobe:
http://www.adobe.com/bin/webfeedback.cgi

****************************************

At least, after Adobe moved the Flash Player test off the Shockwave test page, the new page DOES show info about the latest version.

I like to think I played a small part in getting this improvement, by complaining on feedback forms.

(BTW, it was not obvious to find it on the Shockwave page in the first place, but at least Adobe left a link to the new page for people who have it bookmarked).

ep posted the link at the other post (Adobe’s in a patching mood, too):
http://www.adobe.com/software/flash/about/

****************************************

BTW, my favorite page to finally get all the downloads, “Adobe – Web Players”,
http://www.adobe.com/shockwave/download/alternates/
STILL does not show ANY info about version numbers of the downloads.

I shot off another feedback complaint.

Maybe the webmaster is lazy and just wants to leave that page STATIC.

Reply | Quote

One more thing about that “Test Adobe Shockwave Player” page (http://www.adobe.com/shockwave/welcome/).

Going to that page triggers a file on your system that tries to “dial out”. I think it is to connect to Adobe’s Shockwave update page, but I don’t know – for the last few years, I never give my firewall permission for that “file” to run.

Here’s the current (before latest update) version (filepath is for Windows):
C:WINDOWSsystem32AdobeShockwave 11SwHelper_1157609.exe

The name of the file changes with each update – what is annoying is that I still have 5 previous versions in the same directory. I plan to run the Shockwave uninstaller to check, but I thought that the old ones would get deleted?

So, I guess Adobe is trying to be proactive: the user can see the latest version for download and compare that to her version. (I just find it a little obnoxious that webpages can trigger “helper” programs to run on my system – on Mozilla browsers natch, not IE with ActiveX …. Me thinks it’s the Adobe plugin. Anyone know the mechanism?)

But as rc pointed out, that works only if Adobe keeps ITS OWN webpages up to date.

Reply | Quote

@sanda

See Woody’s previous post, “Adobe’s in a patching mood, too” (https://www.askwoody.com/2010/adobes-in-a-patching-mood-too/) and the comments posted there.

I posted a response to your other post / question there.

Other posters mentioned having better success by using the standalone version(s) of the installer. I sometimes have to resort to that when Firefox just will not run an update inside the browser.

In contrast, Adobe’s standalone installers require you to shut down the corresponding browser (Windows has 2 installers, for IE and Mozilla-based browsers) before installation.

Also, the posters suggested uninstalling the older version first (one poster suggested Control Panel | Add or Remove Programs), while I suggested downloading the installer for Windows or Mac OS X (see Adobe – Web Players [http://www.adobe.com/shockwave/download/alternates/]).

Standalone installers are also better for multiple installations if you have more than one computer.

Reply | Quote

@ sanda

(This is part 2/3; the forum doesn’t like long posts.)

Here’s are some workarounds to get the standalone installers:

1) To get the Mozilla installer, use Opera to download it.

2) While in the Adobe Flash Player Download Center (http://get.adobe.com/flashplayer/), use the “opposite” browser to get the “other browser’s” download, via the “Different operating system or browser?”.

E.g. Use an IE browser (to get the Mozilla download). Adobe will detect IE and offer the IE “install now” download. Click on “Different operating system or browser?” Choose your OS. This time (for Windows), it will offer you a choice of either download. Of course if you choose the IE download, it will again offer you the “install now” version. But if you choose the “opposite” (Mozilla) download, it WILL be a download, REGARDLESS if it says “Agree and install now” (lazy programming for that button – it should change to “Agree and download now” when one selects the “other” radio button).

Likewise, Use a Mozilla browser to get the IE download.

3) Similar to workaround #2, use a different OS to get another’s OS’s browser downloads. (Not very likely most users will be using more than one OS).

4) When you successfully get a download, note the link (it is a “permalink” type [no version numbers in] URL) for future use and bookmark it. (However, it is not so easy to see this download link in most browsers. Opera has a separate Download window with info. Using the GetRight download manager intercept the download also yields the download link.)

Here are three permalinks I got for Windows:

http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player_ax.exe
http://fpdownload.adobe.com/get/flashplayer/current/install_flash_player.exe

http://fpdownload.macromedia.com/get/flashplayer/current/uninstall_flash_player.exe

BTW, “ax” is the IE / ActiveX version and the “plain” one is for non-IE browsers.

4b) Or search / Google for the permalinks to the downloads.

4c) 10 zillion bonus points if you can discover if Adobe still posts an “.msi” version for either of the installers, and if so, find the permalinks.

5) Note: no use trying http://ftp.adobe.com. Adobe no longer posts updates for Reader and web players there. Or prove me wrong (and make me hapy) by finding a browsable / navigatable Adobe download directory with recent updates.

Whew! What some companies do in the name of making things simpler or idiot-proof, ends up making things much harder when one wants to deviate a little bit or something goes wrong (like Firefox having trouble installing on the fly).

****************************************

Just give us another source for the download(s) already, preferably via download directories like FTP or HTTP listings.

Reply | Quote

@ sanda

(This is part 3/3; the forum doesn’t like long posts.)

(Sorry for staleness – I tried posting last week, but the forum rejected the post
saying it was a duplicate – maybe because of overlap with my other post in the other blog? But I see others still posting … and I think this is useful info. I tried again today, and the forum had no error message, but also no “Your comment is awaiting moderation.” message, so I’m pretty sure there is a length restriction – too bad there is no warning… Hence the 3 pieces.)

(The following is more of a comment / b***hfest, but does provide a “history lesson” and was meant to precede post 2/3 above.)

****************************************

(Jump to the workarounds to get the standalone installers, if you want to skip the explanations / b***hing / history lesson.)

****************************************

However, Adobe makes it HARD to get the standalone version(s). When you go the Adobe Flash Player Download Center (http://get.adobe.com/flashplayer/), Adobe’s philosphy (of thinking it is smarter than the user) shows its hand. Adobe tries hard to detect your browser and offer the installer for that browser. Then it wants to update ON-THE-FLY for you (not download): they give you a button to “download and install now” or “agree and install now”.

In the past, only the IE “download” page was the install now version. But even then, in the WAY PAST (version 7?), I think there was a link far down page if one wanted to get the standalone installer, but they removed the link. The Mozilla version used to be download only, but now when Adobe detects Firefox, it wants to “install now” (but Opera goes to get2.adobe.com/flashplayer/ and gets “download now”).

In the past, my favorite Adobe download page for ALL 3 web players, Adobe – Web Players (http://www.adobe.com/shockwave/download/alternates/) had links to download the Mozilla installer, but the IE installer “download” went to an “install now” page.

However, NOW the “download” links for both (UN)HELPFULLY show how Adobe thinks it is smarter than you and REDIRECTS back to the Adobe Flash Player Download Center, which DETECTS your browser and offers you THAT “download”. EVEN IF YOU CHOOSE THE “OPPOSITE” DOWNLOAD. If you are in a Mozilla browser and EVEN if you choose the IE download, you will still be offered the Mozilla “download”. Similarly if you are in an IE browser. Smart? Or stupid?

Reply | Quote

@sanda

After seeing my posts above, not in a tiny edit window, displayed, I see I need 2 corrections:

1) In part 1/3, I said:
“while I suggested downloading the installer for Windows or Mac OS X”

I actually meant “uninstaller”, not “installer”.

2) In part 2/3, I want to add to
item “4)”, about “However, it is not so easy to see this download link in most browsers”.

I just discovered that in Firefox one can get a download’s link.

Open the Downloads window (Tools | Downloads or CTRL-J) and right click on a “download” item and then choose “Copy Download Link”.

(Probably always there but I never knew that till recently.)

Reply | Quote

@guest —

My reason for preferring the Filehippo stand-alone installers is that they do not download and run the insecure Adobe Download Manager helper application, which must then be removed for security reasons. All of the official Adobe download pages download and run (and never remove) the Adobe DLM application.

Reply | Quote

Instead of downloading & applying the recent individual Adobe Reader 9.3.x patches, Adobe has just released the FULL Adobe Reader 9.3.4 installer on the Adobe Reader download page:
http://get.adobe.com/reader/

I’ll just remove the old Reader 9.3 app from my computers and then download and install the newly released Adobe Reader 9.3.4 program, which has all the incorporated security fixes.

Reply | Quote