Furthermore it's more shameful to release an update for the manual update users two days after the automatic update users get it. Get over yourselves already. This is already being exploited, push fixes out faster or atleast at the same time.
Steve Jobs was so right.
Uninstall flash, and refuse to reinstall it. And see if your nontechy friends and relatives will let you do the same to protect them as well.
There are a lot of sites that have multiple streaming options, but when flash is installed it's what they default to.
apple quicktime has over two hundred -- and that's ONLY counting from OS X days (i.e., not including Mac OS days).
Writing network-enabled rich-content delivery platforms is a hard task. flash player is installed on a tremendous number of devices across a staggeringly diverse operating system segment. Problems are sadly impossible to avoid.
Firefox has more than 1100 -- again, not counting Mozilla days. Chrome has more than a thousand. Safari, commendably, has little more than five hundred. The point is nobody gets it right. Not even Steve Jobs.
There haven't been many major pieces of software that didn't have at least one major security vulnerability reported in the last year. Apple's products being no exception.
That isn't making excuses for them, of course, but it gives us an important data point as to what behaviour to avoid in future. (I'm looking at you, Silverlight.)