Adobe which earlier told ZDNet Australia that “while Adobe did resolve these issues in the Adobe Illustrator/Photoshop/Flash Professional CS6 major releases, no dot release was scheduled or released for Adobe Illustrator/Photoshop/Flash Professional CS5 or CS5.5,” and that “the team did not believe the real-world risk to customers warranted an out-of-band release to resolve these issues,” seems change its mind of now not asking customers to pay for the security fixes.
A post to Adobe’s security blog dated says the following:
We are in the process of resolving the vulnerabilities…in Adobe Illustrator CS5.x, Adobe Photoshop CS5.x (12.x) and Adobe Flash Professional CS5.x, and will update the respective Security Bulletins once the patches are available.
Users may monitor the latest information on the Adobe Product Security Incident Response Team blog at http://blogs.adobe.com/psirt or by subscribing to the RSS feed at http://blogs.adobe.com/psirt/atom.xml.
