SAP patch batch includes fix for 3-year-old info disclosure vuln
in The Register by John Leyden