Adobe: monthly updates?

Adobe is considering reducing the interval between security updates for Adobe Reader from 90 to 30 days.

Adobe started a three-monthly cycle in mid-2009 and has since been releasing updates for Adobe Reader and Acrobat on the second Tuesday of every third month –- the same day as Microsoft's official patch day.

In view of the large number of security vulnerabilities discovered in recent months, major customers appear to have increased the pressure on Adobe to reduce the interval between security patch releases. According to Brad Arkin, Adobe's Director of Product Security and Privacy, a monthly cycle is one of the alternatives currently under discussion. He added that, in emergencies, Adobe is also now in a position to develop patches within 15 days and to release them outside of the regular patch cycle.

In addition to Adobe Reader, the company wants to bring products such as Flash and Shockwave into the update cycle. Previously, updates for these products have been released as needed and when ready. It's not clear whether products other than Adobe Reader will be patched automatically by means of the new update mechanism.

Source: The H Security.