Zero-day exploit patch for Reader 9?

Any word on the zero-day exploit patch for Reader 9?

Yes, Claudio, thanks for the reply.  I may be a little overly anxious in asking because, while I realize the patch is expected sometime this week, I have grown accustomed to Tuesday releases.  Meanwhile our security team wants us to patch this exploit ASAP.  I was just wondering if there were any updates on the expected release other than "this week."

Similar Messages

  • Warning: Zero Day exploit in the wild targeting Adobe Reader 9.4.6

    Adobe has just released details of a Zero Day exploit targeting Reader version 9.4.6, details here: http://blogs.adobe.com/asset/2011/12/background-on-cve-2011-2462.html
    An independent site called H Security also has some background info on the subject which, to a lesser degree, also affects 10.1.1: http://www.h-online.com/security/news/item/New-Adobe-Reader-zero-day-in-the-wild-1391441.h tml

    So here we are now sitting pretty with Reader updated to 9.4.7
    However, once again, this update has FAILED to address the issue with the Firefox plugin which remains as 9.4.5.236
    So anybody who unwittingly updates Reader to 9.4.7 but doesn't notice that the Firefox plugin remains as 9.4.5.236 is going to have a nasty surprise if they happen to land on a malware infested site!
    The only workaround here is to disable the plugin in the Firefox Add-ons manager which you can access by hitting CTRL+SHIFT+A. Go to the Plugins menu and click the "Disable" button to the right on the Reader installation. This means you will be unable to read PDF files in the Firefox browser and will instead be presented with the option to download them to your own machine. If however you choose to open them with the disabled plugin, it will once again remain enabled until you manually disable it again, so be careful.

  • Is the Java "Zero-Day" bug dangerous for MountainLion users?

    Is the Java "Zero-Day" bug dangerous for MountainLion users?

    It is not yet dangerous, to my knowledge, as it is currently being used only to distribute Windows malware. But users of Java 7 are certainly vulnerable, should a hacker start distributing Mac malware through this vulnerability.
    For more info, see:
    http://www.reedcorner.net/new-unpatched-java-vulnerability-discovered/

  • Patch for the lastest zero day vulnerability

    Hi
    Microsoft has released a patch for the latest zero day vulnerability. In the page
    https://support.microsoft.com/kb/2887505 it is written:
    "You must have security update 2870699 installed for this Fix it to provide effective protection against this issue."
    Question: What happens if this path is installed and 2870699 has not been installed yet?
    a: Will not provide effective protection against this issue before 2870699 has been installed - but work fine when it has been installed?
    or
    b: Will never provide effective protection against this issue if 2870699 is installed after the fix in 2887505.
    Thanks in advance
    Best regards Harald

    Hi,
    This fixit is a appcompat shim, performs as a temporary Advanced Workaround to help protect against attempts to exploit this vulnerability. I think
    it is recommended to install the two updates in sequence just as described in the KB.
    To better understand this, I’d like to share the following articles with you:
    CVE-2013-3893: Fix it workaround available
    http://blogs.technet.com/b/srd/archive/2013/09/17/cve-2013-3893-fix-it-workaround-available.aspx
    Regards,
    Yolanda

  • Leaked Flash Zero Day Likely to be Exploited by Attackers

    SURPRISE! There's a Flas 0-Day exploit.If you're not following ourSecurity Responseteam by now (also at@threatintel)you probably should.Whether you are a Symantec user or not, the men and women of this team are out there fighting the good fight every day and bringing the information to you. Dig it:Leaked Flash Zero Day Likely to be Exploited by Attackers
    Proof-of -concept code to unpatched vulnerability published after breach at hackers-for-hire company.Symantec has confirmed the existence of a new zero-day vulnerability in Adobe Flash which could allow attackers to remotely execute code on a targeted computer. Since details of the vulnerability are now publicly available, it is likely attackers will move quickly to exploit it before a patch is issued.Details of the vulnerability surfaced following acyberattack against the controversial...
    This topic first appeared in the Spiceworks Community

    Looks like it's there now
    # pacman -Syu
    :: Synchronizing package databases...
    core is up to date
    extra 377.0K 429.6K/s 00:00:01 [##############################################] 100%
    community 370.0K 271.5K/s 00:00:01 [##############################################] 100%
    :: Starting full system upgrade...
    resolving dependencies...
    looking for inter-conflicts...
    Targets (15): brltty-4.0-1 xulrunner-1.9.1.1-1 firefox-3.5.1-1 lib32-glibc-2.10.1-3
    lib32-e2fsprogs-1.41.8-1 lib32-gcc-libs-4.4.0-5 lib32-libgl-7.4.4-1 lib32-libjpeg-7-1
    lib32-libxml2-2.7.3-2 lib32-libxt-1.0.6-1 lib32-mesa-7.4.4-1 recode-3.6-3 enca-1.9-4
    libass-0.9.6-2 vlc-1.0.0-5
    Total Download Size: 41.50 MB
    Total Installed Size: 143.15 MB
    Proceed with installation? [Y/n]

  • Researchers reveal attack code for new IE zero-day...

    Until this is patched all versions of  Internet Explorer including IE8 on Windows 7 are vulnerable.  
    Researchers reveal attack code for new IE zero-day
    Try to avoid using Internet Explorer until patched, I'd rather warn people now than let the Holodays etc be ruined.
    Merry Christmas & Happy New Year.
    "I have this awful feeling someone is watching every move I make (one of my pet hates is router location tagging)." Marvin (A paranoid Android)

    Rottie wrote:
    Not being smug, but this is one of the many reasons why I personally prefer to use an open source browser. Fix times for "exploits" tend to be a lot faster.
    Seasons greetings to you, too.
    I only unlock IE when applying Windows Security Patches, otherwise I use a variety of locked down Browsers, 
    The purpose of my post however was to warn those that use IE through choice or other than that at their workplace.
    Again Seasons Greeting to you.
    "I have this awful feeling someone is watching every move I make (one of my pet hates is router location tagging)." Marvin (A paranoid Android)

  • Virus/Malware Solution Recommended For Flash Zero Day Breach

    Can anyone recommend a virus/malware protection solution.  I attempted to download adobe flash this morning and now malware has control of my browser and is sending a page with an 866 number to call.  My IT tech called the number and it is an India call center and they want remote access to your machine.  I have installed several different malware packages and none of them can find the files that are causing this problem.  I am using a MAC with OSX 10.10.

    Aaaahhhh yes... remember when an entire day could by without news of a breach or hack or targeted attack? Yeah... neither do I.It will probably shock you all to hear that the Symantec Security Response team dropped a new blog over the weekend outlining a Zero-Day vulnerability in Adobe Flash player. Dig it:Second PoC Exploit for Adobe Flash Player Discovered After the Hackers-for-Hire Company Breach
    Yet another Adobe Flash Player zero-day discovered from the Hacking Team breach.Symantec is aware of a second vulnerability (CVE-2015-5122) in Adobe Flash Player that’s associated withHacking Team, the Italian company which recently suffered a major data breach. The existence of the unpatched vulnerability has been confirmed by Adobein itssecurity bulletin.Symantec’s analysis has confirmed that the vulnerability can be successfully exploited...
    This topic first appeared in the Spiceworks Community

  • Our product has used OLI interface with IWebBrowser but crashes since OLE Zero Day Patch (Nov 12)

    It crashes when we call the Navigate method (see below).  This has worked for many years in all previous windows environmnets but is crashing on windows 7 since OLE Zero Day Patch (Nov 12).  
      (IDispatch(GetOleObject) as IWebBrowser2).Navigate(URL, EmptyParam, EmptyParam, EmptyParam, EmptyParam)
    What can we do to rectify this problem.
    Thanks
    Jim Clark
    jim@m&&&&.com.au
    61 03 9&&& 0086

    Hello Jim Clark,
    Please temporarily uninstall the Update and check if this issue still exists.
    For the methods not work and how to debug it, please consider seek help at the developer forum for more professional help.
    Thank you for your understanding. 
    Best regards,
    Fangzhou CHEN
    Fangzhou CHEN
    TechNet Community Support

  • New Zero Day Vulnerability - does it impact Reader 8.3.1

    I recognize EOL for Reader 8.x was November, but I need to know if this new vulnerability impacts users of Reader 8.3.1.

    Thank you, and yes, but it does not specifically say if version 8.3.1 is
    impacted (that I can tell)
    Melissa Ryden
    [signature removed by host]
    From:   Claudio González <[email protected]>
    To:     [email address removed by host]
    Date:   12/08/2011 11:24 AM
    Subject:        Re: New Zero Day Vulnerability - does it impact Reader 8.3.1 New Zero Day Vulnerability - does it impact
    Reader 8.3.1
    Re: New Zero Day Vulnerability - does it impact Reader 8.3.1
    created by Claudio González in Adobe Reader - View the full discussion
    Did you see this Warning?
    http://forums.adobe.com/thread/934058?tstart=0
    Replies to this message go to everyone subscribed to this thread, not
    directly to the person who posted the message. To post a reply, either
    reply to this email or visit the message page: [
    http://forums.adobe.com/message/4071814#4071814]
    To unsubscribe from this thread, please visit the message page at [
    http://forums.adobe.com/message/4071814#4071814]. In the Actions box on
    the right, click the Stop Email Notifications link.
    Start a new discussion in Adobe Reader by email or at Adobe Forums
    For more information about maintaining your forum email notifications
    please go to http://forums.adobe.com/message/2936746#2936746.

  • I have used photoshop for several months now when I login, I have lost all my fonts and actions... it is saying I have zero days left in my trial...

    I have used photoshop for several months now when I login, I have lost all my fonts and actions... it is saying I have zero days left in my trial...

    Hi rachel,
    Please refer to the help document below:
    Creative Cloud applications unexpectedly revert to trial mode | CS6, CCM
    Regards,
    Sheena

  • What's up with Java Zero Day, and is Snow Leopard endangered?

    That.

    Patched or not and regardless of the version, I'd keep Java disabled, period. Best place for Java is shackled, locked up and caged.
    http://krebsonsecurity.com/2012/08/attackers-pounce-on-zero-day-java-exploit/
    If you do not need Java, get rid of it, and if you do need it for specific applications or sites, limit your use of Java to those sites and applications, using a secondary browser for that purpose.

  • AAC/MPEG-4 support patch for abcde

    I got bored to day and made up this patch for abcde that adds support for AAC using the M4A extension.
    It uses FAAC as the encoder and also patches abcde to version 2.2.3
    I have not tested it yet so bear with me...i'll post my test results later.
    You'll have to manually add the "M4AENCOPTS=" variable to the config
    usage is: abcde -o m4a
    UPDATED: fixed a plethora of typos
    another side note is the fact FAAC must be compiled with mpeg-4 support, the Archlinux package for FAAC isn't, so therefore this could be a problem unless you compile FAAC yourself. I submitted a feature request to get mp4 support added.
    the following is the 2.2.0 to 2.2.3 update+AAC patch. I will submit a AAC patch for the newest release to the developers of abcde later on.
    --- abcde-old-2.2.0 2005-03-08 12:42:14.000000000 -0500
    +++ abcde2 2005-03-08 12:11:07.000000000 -0500
    @@ -11,7 +11,7 @@
    # Copyright for this work is to expire January 1, 2010, after which it
    # shall be public domain.
    -VERSION="2.2.0"
    +VERSION="2.2.3"
    usage ()
    @@ -21,7 +21,7 @@
    echo "-1 Encode the whole CD in a single file"
    echo "-a <action1[,action2]...>"
    echo " Actions to perform (cddb,read,normalize,encode,tag,move,playlist,clean)"
    -echo "-A Experimental actions (retag, transcode)"
    +#echo "-A Experimental actions (retag, transcode)"
    echo "-b Batch mode: enable album normalization and nogap encoding"
    echo "-c <file>"
    echo " Specify a configuration file (overrides system and user config files)"
    @@ -366,6 +366,9 @@
    mpc)
    run_command tagtrack-$1 true
    + m4a)
    + run_command tagtrack-$1 true
    + ;;
    esac
    done
    @@ -489,6 +492,10 @@
    ## FIXME ## to the encoder ends up empty.
    run_command encodetrack-$OUTPUT-$1 nice $ENCNICE $MPPENCODER $MPPENCODEROPTS --artist "$TRACKARTIST" --album "$DALBUM" --title "$TRACKNAME" --track "$1" --genre "$CDGENRE" --year "$CDYEAR" --comment "$COMMENT" "$IN" "$OUT"
    + m4a)
    + # AAC/MPEG-4 format (.m4a) is done locally, with inline tagging.
    + run_command encodetrack-$OUTPUT-$1 nice $ENCNICE $M4AENCODER $M4AENCODEROPTS --artist "$TRACKARTIST" --album "$DALBUM" --title "$TRACKNAME" --track "$1" --genre "$CDGENRE" --year "$CDYEAR" --comment "$COMMENT" -w "$IN" -o "$OUT"
    + ;;
    esac
    done
    # Only remove .wav if the encoding succeeded
    @@ -737,6 +744,9 @@
    if [ "$INTERACTIVE" = "y" ]; then
    while [ "$DONE" != "y" ]; do
    read ERASEPLAYLIST
    + if [ "$ERASEPLAYLIST" = "" ]; then
    + ERASEPLAYLIST=e
    + fi
    case $ERASEPLAYLIST in
    e|E|a|A|k|K) DONE=y ;;
    @@ -764,7 +774,7 @@
    ARTISTFILE=$(mungefilename "$TRACKARTIST")
    # If we want to start the tracks with a given number, we need to modify the
    # TRACKNUM value before evaluation
    - if [ -n $STARTTRACKNUMBER ] ; then
    + if [ -n "$STARTTRACKNUMBER" ] ; then
    # Get the trackpadding from the current track
    CURRENTTRACKPADDING=$(echo -n $UTRACKNUM | wc -c)
    TRACKNUM=$( printf %0.${CURRENTTRACKPADDING}d $(expr ${UTRACKNUM} + ${STARTTRACKNUMBER} - 1 ))
    @@ -843,7 +853,7 @@
    cdparanoia|debug)
    if [ "$WEHAVEACD" = "y" ]; then
    vecho "Querying the CD for audio tracks..."
    - TRACKS=$( $CDROMREADER -Q 2>&1 | egrep '^[[:space:]]+[[:digit:]]' | tail -n 1 | awk '{print $1}' | tr -d "." | tr 'n' ' ' )
    + TRACKS=$( $CDROMREADER -d $CDROM -Q --verbose 2>&1 | egrep '^[[:space:]]+[[:digit:]]' | tail -n 1 | awk '{print $1}' | tr -d "." | tr 'n' ' ' )
    CDPARANOIAAUDIOTRACKS="$TRACKS"
    else
    if [ -f "$ABCDETEMPDIR/status" ] && checkstatus cdparanoia-audio-tracks ; then
    @@ -1354,7 +1364,7 @@
    EDITCDDB=n
    fi
    if [ "$EDITCDDB" = "y" ]; then
    - CDDBDATAMD5SUM=$($MD5SUM "$CDDBDATA" | cut -d " " -f 1);
    + CDDBDATAMD5SUM=$($MD5SUM "$CDDBDATA" | cut -d" " -f1);
    # Use the debian sensible-editor wrapper to pick the editor that the
    # user has requested via their $EDITOR environment variable
    @@ -1387,7 +1397,7 @@
    # Some heuristics first. Look at Disc Title, and if it starts with
    # "Various", then we'll assume Various Artists
    - if [ "$(grep ^DTITLE= "$CDDBDATA" | cut -f2 -d= | egrep -ci '^(various|soundtrack|varios|sonora|ost)')" != "0" ]; then
    + if [ "$(grep ^DTITLE= "$CDDBDATA" | cut -f2- -d= | egrep -ci '^(various|soundtrack|varios|sonora|ost)')" != "0" ]; then
    echo "Looks like a Multi-Artist CD" >&2
    VARIOUSARTISTS=y
    else
    @@ -1470,7 +1480,7 @@
    echo "variousartiststyle=$VARIOUSARTISTSTYLE" >> "$ABCDETEMPDIR/status"
    if [ "$EDITCDDB" = "y" ] && [ "$UNINTENTIONALLY_ANGER_THE_FREEDB_PEOPLE" = "y" ]; then
    - if [ $CDDBDATAMD5SUM != "" ] && [ $CDDBDATAMD5SUM != $($MD5SUM "$CDDBDATA" | cut -d " " -f 1) ]; then
    + if [ $CDDBDATAMD5SUM != "" ] && [ $CDDBDATAMD5SUM != $($MD5SUM "$CDDBDATA" | cut -d" " -f1) ]; then
    # This works but does not have the necessary error checking
    # yet. If you are familiar with the CDDB spec
    # (see http://www.freedb.org/src/latest/DBFORMAT)
    @@ -1577,7 +1587,7 @@
    WAVDATA="$ABCDETEMPDIR/track$UTRACKNUM.wav"
    OUTDATA="$ABCDETEMPDIR/track$UTRACKNUM.$OUTPUTTYPE"
    if [ -r "$CDDBDATA" ]; then
    - TRACKNAME=$(grep ^TTITLE$CDDBTRACKNUM= "$CDDBDATA" | head -n 1 | cut -f2 -d= | tr -d [:cntrl:])
    + TRACKNAME=$(grep ^TTITLE$CDDBTRACKNUM= "$CDDBDATA" | head -n 1 | cut -f2- -d= | tr -d [:cntrl:])
    echo "Grabbing track $UTRACKNUM: $TRACKNAME..." >&2
    else
    echo "Grabbing track $UTRACKNUM..." >&2
    @@ -1692,6 +1702,7 @@
    SPEEXENCODERSYNTAX=default
    MPPENCODERSYNTAX=default
    NORMALIZERSYNTAX=default
    +M4AENCODERSYNTAX=default
    OUTPUTFORMAT='${ARTISTFILE}-${ALBUMFILE}/${TRACKNUM}.${TRACKFILE}'
    # Use the following VAOUTPUTFORMAT to revert to 2.0.x VA format:
    @@ -1738,6 +1749,7 @@
    SPEEXENC=speexenc
    # mpp (Musepack)
    MPPENC=mppenc
    +M4AENC=faac
    ID3=id3
    ID3V2=id3v2
    @@ -1773,6 +1785,7 @@
    SPEEXENCOPTS=
    # mpc
    MPPENCOPTS=
    +M4AENCOPTS=
    ID3OPTS=
    ID3V2OPTS=
    @@ -2039,6 +2052,7 @@
    spx) [ "$SPEEXENCODERSYNTAX" = "default" ] && SPEEXENCODERSYNTAX=speexenc ;;
    mpc) [ "$MPPENCODERSYNTAX" = "default" ] && MPPENCODERSYNTAX=mppenc ;;
    + m4a) [ "$M4AENCODERSYNTAX" = "default" ] && M4AENCODERSYNTAX=faac ;;
    *) echo "abcde error: Invalid OUTPUTTYPE defined" >&2
    exit 1
    @@ -2100,6 +2114,12 @@
    MPPENCODER="$MPPENC"
    esac
    +case "$M4AENCODERSYNTAX" in
    + faac)
    + M4AENCODEROPTS="$M4AENCOPTS"
    + M4AENCODER="$M4AENC"
    + ;;
    +esac
    # and which tagger
    @@ -2144,7 +2164,7 @@
    ${NEEDCOMMENTER+$VORBISCOMMENT} ${NEEDMETAFLAC+$METAFLAC}
    ${NEEDNORMALIZER+$NORMALIZER} ${NEEDEJECT+$EJECT}
    ${NEEDDISKTOOL+disktool} ${NEEDCDSPEED+$CDSPEED}
    - ${NEEDVORBISGAIN+$VORBISGAIN}
    + ${NEEDVORBISGAIN+$VORBISGAIN} $M4AENCODER
    do
    # Cut off the command-line options we just added in
    X=$(echo $X | cut -d' ' -f2)
    @@ -2207,37 +2227,6 @@
    esac
    fi
    -if [ "$STRIPDATATRACKS" = "y" ] && [ ! "$ONETRACK" = "y" ]; then
    - case "$CDROMREADERSYNTAX" in
    - cdparanoia|debug)
    - # cdparanoia can query the CD, so let's process the TRACKQUEUE list with the results.
    - if checkstatus cdparanoia-audio-tracks; then
    - CDTRACKQUEUE=$( cat $ABCDETEMPDIR/cdparanoia-audio-tracks )
    - else
    - ## FIXME ##
    - vecho "Querying the CD to obtain a list of valid audio tracks..."
    - $CDROMREADER -Q > $ABCDETEMPDIR/cdparanoia-query 2>&1
    - # Obtain a list of valid audio tracks from the results of the query
    - CDTRACKQUEUE=$( cat $ABCDETEMPDIR/cdparanoia-query | egrep '^[[:space:]]+[[:digit:]]' | awk '{print $1}' | tr -d "." | tr 'n' ' ' )
    - fi
    - # Obtain the track padding value from the before-processing list and pad the CD list
    - TRACKNUMPADDING=$( echo $TRACKQUEUE | awk '{print $1}' | tr -d " n" | wc -c )
    - for TRACK in $CDTRACKQUEUE ; do
    - TRACKNUM=$(printf %0.${TRACKNUMPADDING}d $(expr ${TRACK} + 0 ))
    - PADNEWTRACKQUEUE=$(echo $PADNEWTRACKQUEUE $TRACKNUM)
    - done
    - CDTRACKQUEUE=$PADNEWTRACKQUEUE
    - # Now, compare if the values in the list are valid tracks in the CD
    - for TRACK in $TRACKQUEUE; do
    - if echo $CDTRACKQUEUE | grep $TRACK >/dev/null ; then
    - NEWTRACKQUEUE="$NEWTRACKQUEUE $TRACK"
    - fi
    - done
    - TRACKQUEUE="$NEWTRACKQUEUE"
    - esac
    -fi
    # Create playlist if needed (backgroundable) and start reading in tracks
    @@ -2446,7 +2435,7 @@
    # TRACKNUM=$(printf %0.${TRACKNUMPADDING}d $(expr ${UTRACKNUM} + 0))
    TRACKNUM=$UTRACKNUM
    CDDBTRACKNUM=$(expr $UTRACKNUM - 1)
    - TRACKNAME=$(grep ^TTITLE$CDDBTRACKNUM= "$CDDBDATA" | cut -f2 -d= | tr -d [:cntrl:] | sed 's/ +$//')
    + TRACKNAME=$(grep ^TTITLE$CDDBTRACKNUM= "$CDDBDATA" | cut -f2- -d= | tr -d [:cntrl:] | sed 's/ +$//')
    splitvarious
    fi
    fi
    the patches can also be found here http://www2.rudefyet.com:8080/patch
    please post any other issues you have

    not yet, i'm going to work all the kinks out before i submit it
    as of right now I noticed some major typos, on my part, that cause it to fail...i'm working on that right now

  • When is Apple gonna release a patch for iTunes to sync apps?

    I already bought the apps the day it first came out and i can't even sync the january software upgrade to my ipod touch. i'm not about to re-sync my ipod and lose all my music just for 5 little apps. i refuse to do that. i wanna know when apple is gonna release a patch for itunes (7.6.1) so i can sync the upgrade file to my ipod touch without having to lose my music collection?
    if the patch doesn't come out by the end of the month, i'm gonna ask for my money back.

    well, the thing is, some of my mp3's aren't on my computer since i probably deleted them off my hard drive at one point or if i was using another computer to add my music. i have an ipod video that has the same exact collection as my ipod touch, but i like to have my playlists a certain way and i don't want to start organizing it the way i like it again. its such a pain.
    i just want apple to at least say something about a patch. they're always quiet about everything, even something as simple as updates.

  • Cant download Required OS and Component Patches for Sol. 10 SPARC-Sunsolve

    Hi guys,
    I've been trying for days now, but I cant seem to download the latest Java_ES_Required or Component Patches for Solaris 10 sparc. Whenever I try and download I get this error message from Sunsolve:
    SunSolve Error
    You have encountered the following error(s) or warning(s):
    o An application error has occurred. The error is logged for further analysis.
    The URL is: http://sunsolve.sun.com/show.do?target=patches/patch-access
    Anyone know what the heck is going on, or how I go about getting Sun to fix it?
    Regards
    Darinder

    Did you logged into your sun account and tried it.

  • JUL09 CPU Patch for EMREP DB.

    All,
    I recently installed 10gR5 Grid Control, and the database that comes bundled with the installation is Oracle Database 10g 10.1.0.5.0.
    Well the JUL09 CPU Patch for this database was released, but the patch is in extended support. What does the community recommend as a best practice in this case? Upgrade the database to Oracle Database 10g 10.2.0.4.0?
    Any suggestions would be fantastic. Thanks!

    Yes that is what I did and it worked great.
    Now when I upgraded the 10.1.0.5 repository for another server's Application Server and deinstalled the old version of the database from the infrastructure home, it could not update the inventory information correctly and now I always have a 10.1.0.5 entry in the console's main page showing zero installations. Anybody know of a workaround?
    Also do not apply the cpujul2009 (Patch 8537032) to the OMS home. It screws up the job system. I tried it twice with the same results.

Maybe you are looking for