According to Adobe, the users had either the option to upgrade to CS6 - and pay $375 for the upgrade - or to keep using CS5 and CS5.5 and "follow security best practices and exercise caution when opening files from unknown or untrusted sources."
"No dot release was scheduled or released for Adobe Photoshop CS5," a company spokeswoman explained the reason behind their decision. "In looking at all aspects, including the vulnerabilities themselves and the threat landscape, the team did not believe the real-world risk to customers warranted an out-of-band release for the CS5 version to resolve these issues."
But a day later, they changed their tune. Faced with a backlash from angry customers, Adobe bowed to the pressure and backpedalled on its original decision, deciding to patch the eight vulnerabilities in question free of charge.
"We are in the process of resolving the vulnerabilities addressed in these security bulletins in Adobe Illustrator CS5.x, Adobe Photoshop CS5.x and Adobe Flash Professional CS5.x, and will update the respective security bulletins once the patches are available," they stated.
They did not say how long it will take for the patches to be issued.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.