Adobe have released a security advisory on the 9th of October 2024 in line with their regular monthly patch schedule which includes a number of updates to address vulnerabilities in nine (9) medium risk products.
These updates address vulnerabilities which may impact services through Remote Code Execution, Information Disclosure, Elevation of Privilege, Cross-Site Scripting, and Security Restriction Bypass.
For more information please see: Adobe Security Update
This release consists of security updates for the following products:
- Adobe Substance 3D Painter 10.0.1 and earlier versions
- Adobe Commerce 2.4.7-p2 and earlier versions
- Adobe Commerce 2.4.6-p7 and earlier versions
- Adobe Commerce 2.4.5-p9 and earlier versions
- Adobe Commerce 2.4.4-p10 and earlier versions
- Adobe Commerce B2B 1.4.2-p2 and earlier versions
- Adobe Commerce B2B 1.3.5-p7 and earlier versions
- Adobe Commerce B2B 1.3.4-p9 and earlier versions
- Magento Open Source 2.4.7-p2 and earlier versions
- Magento Open Source 2.4.6-p7 and earlier versions
- Magento Open Source 2.4.5-p9 and earlier versions
- Magento Open Source 2.4.4-p10 and earlier versions
- Adobe Dimension 4.0.3 and earlier versions
- Adobe Animate 2023 23.0.7 and earlier versions
- Adobe Animate 2024 24.0.4 and earlier versions
- Lightroom 7.4.1 and earlier versions
- Lightroom Classic 13.5 and earlier versions
- Lightroom Classic (LTS) 12.5.1 and earlier versions
- Adobe InCopy 19.4 and earlier versions
- Adobe InCopy 18.5.3 and earlier versions
- Adobe InDesign ID19.4 and earlier versions
- Adobe InDesign ID18.5.3 and earlier versions
- Adobe Substance 3D Stager 3.0.3 and earlier versions
- Adobe FrameMaker 2020 Release Update 6 and earlier versions
- Adobe FrameMaker 2022 Release Update 4 and earlier versions
Matsco recommends any affected systems are updated as soon as convenient.