July 12, 2005

Dear Sphera customer,

On July 7th 2005 a PHP security advisory was released.

Vulnerability Reference:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1751

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1921   

Solution:
This vulnerability applies to applications and end-users utilizing PHP version 4.3.11 and prior versions. Sphera customers running ServerDirector 3.7 on RHEL ES/AS2.1 will have a patch available on August 15, 2005. The fix will be based on the RPM distribution tool. Detailed instructions on using the tool and applying the patch will be included with the release.

Should you have any questions, please contact us through your eService account at http://support.sphera.com