Still no patch for Adobe Reader ?

The patches for zero day flaw for both the 9 and 7/8 versions have been
released - but only for Windows and Mac.
No mention is made of a Linux patch as far as I can see on Adobe's site.
I hope they have not put the release on the backburner !
I need Adobe Reader 8 for efiling income tax returns. Have installed
patched 8.1.4 in Windows but prefer to use Linux.

 

You should not worry too much. The application runs limited, so any exploit probably won't work. The fear hype is always a major issue with these things, but it's nothing new. There's an x application with y vulnerability.

Even on Windows, when running with surun/srp/lua/whatever, nothing much will happen. Besides, the shell handler thingie is a pure window issue.

Furthermore, you have tons of alternatives available.

If you REALLY worry, try live CD. You can install Adobe in live CD.

Mrk

 

Ocky,

I agree with Mrk that there are many alternatives. But if you really need the Adobe Reader, version 8.1.3 can be found on the medibuntu repositories.

 

Thank you for allaying some of my concerns. Can you recommend an
alternative that will enable me to fill in form fields etc. ? As mentioned
that is needed for completing my income tax return online. (For instance in
Windows I mainly use PDF XChange Viewer but was unable to use it online
for filling in form fields etc. in my tax return. I had to use Adobe.)

The Linux patch for the 8.1.3 version I have now will be 8.1.4 when it is
finally released - if ever.

 

Tax return files should be ok ... It's crafted files you should "worry" about and I don't see how this fits the bill.
Mrk

 

Evince is a far better alternative to Adobe Reader, I don't even bother installing the older version 8 in Ubuntu.

 

Well, can you fill in the blocks in this example (taken from tax site)
http://downloads.sarsefiling.co.za/ITCOR_En_C001.pdf
One letter/number per block. I can't with Evince, the text shows, but not
on a per block basis. (Opera 9.64).

..and what about the certificate details (GeoTrust) - nothing shown plus the form fields can't be highlighted.

In other words Evince no can do interactive form fields, so I need Adobe, unless there is something else.

 

Yet another Adobe patch came out a few hours ago. They patch that program once or twice a week nowadays!: http://www.adobe.com/support/security/bulletins/apsb09-04.html

 

Alas, only for Windows and Mac.

 

From Adobe site. "Adobe now plans to make available Adobe Reader 9.1 and Adobe Reader 8.1.4 for Unix by March 24."