#adobe
Title
m

Mark Takata (Adobe)

08/17/2023, 4:02 PM
So regarding the new update, I wanted to clarify something, because I've seen a few folks post about how Adobe "wasn't fixing this security bug in 2018". This update is a proactive fix for our supported versions which locks out future potential vectors for exploitation of CF. Basically we fixed the security issues that came up in a targeted fashion when they arrived. But then we spent a great deal of time with internal Adobe security people (not just in CF) to think of the potential for future-proofing (as best we can) the generalized ways CF could be exploited, as it related to that smattering of bugs earlier. This fix is a hardening, not a repair. It should also be noted that, due to the wide-ranging potential effects this work might have, we enlisted the help of several trusted community members to test the work on real workloads prior to releasing it into the wild. I want to thank those customers and community partners for their hard work in making sure this update did not negatively affect performance or introduce any bugs. You folks know who you are and we appreciate you.
🤘 5
❤️ 2
🎉 1
👍 7