http://blogs.zdnet.com/security/?p=3933
so if you haven't updated, do it now.
* CVE-2009-1728 A stack buffer overflow exists in the handling of Canon RAW images. Viewing a maliciously crafted Canon RAW image may lead to an unexpected application termination or arbitrary code execution.
* CVE-2009-1722 A heap buffer overflow exists in ImageIOs handling of OpenEXR images. Viewing a maliciously crafted OpenEXR image may lead to an unexpected application termination or arbitrary code execution.
* CVE-2009-1721 An uninitialized memory access issue exists in ImageIOs handling of OpenEXR images. Viewing a maliciously crafted OpenEXR image may lead to an unexpected application termination or arbitrary code execution.
* CVE-2009-1720 Multiple integer overflows exist in ImageIOs handling of OpenEXR images. Viewing a maliciously crafted OpenEXR image may lead to an unexpected application termination or arbitrary code execution.
* CVE-2009-2188 A buffer overflow exists in ImageIOs handling of EXIF metadata. Viewing a maliciously crafted image may lead to an unexpected application termination or arbitrary code execution.
* CVE-2009-0040 An uninitialized pointer issue exists in the handling of PNG images. Processing a maliciously crafted PNG image may lead to an unexpected application termination or arbitrary code execution.
so if you haven't updated, do it now.