Description

SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and malicious people to conduct cross-site scripting and script insertion attacks, bypass certain security restrictions, and compromise a vulnerable system.

This also fixes a vulnerability in novell-lum, which can be exploited to access the console without entering a password.

For more information:
SA23111
SA23143
SA23195
SA23387

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.suse.com/archive/suse-security-announce/2006-Dec/0008.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers