[SUSE-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: PatchesforSUSELinuxEnterprise

[Notification of New SUSE Fixlet Messages]

Fixlet Site - PatchesforSUSELinuxEnterprise
Current Version: 259	Published: Mon, 19 Oct 2009 22:42:21  GMT

New Fixlets:
============

***************************************************************
Title: PATCH-B9101601 - Security update for PHP5 - SLES10 SP2
Severity: <Unspecified>
Fixlet ID: 910160101
Fixlet Link: http://download.novell.com/Download?buildid=f8S93tYvsq4~

Fixlet Description: Multiple issues have been fixed in php5:   php_openssl_apply_verification_policy() fails to verify certificate (CVE-2009-3291) "missing sainity checks around exif" (CVE-2009-3292) unspecified vulnerability in the imagecolortransparent() (CVE-2009-3293) denial of service in exif module (CVE-2009-2687) Additionally fixed:   xmlparse was broken read_exif_data() only returns the first letter of UTF-16 strings Please update. Please see patch page for more detailed information.