Adobe will try to get intelligence from its security partners earlier in the attack timeline, said Arkin. "We're working hard to get information as early as possible in the awareness cycle," he said. "Maybe we would have made a different decision if we had known about the vulnerability in November."
The Jan. 12 security update for Reader and Acrobat will include patches for other bugs that have been privately reported to Adobe by researchers. Arkin declined to get specific about what will be patched then, or even how many flaws will be fixed. "But we're looking for something more modest in size than the one we shipped in October," he said.
Adobe patched 29 bugs in Reader and Acrobat in its last regularly scheduled security update, which was released Oct. 13.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld . Follow Gregg on Twitter @gkeizer , send e-mail at firstname.lastname@example.org or subscribe to Gregg's RSS feed .