Description

SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain knowledge of potentially sensitive information, cause a DoS (Denial of Service), or gain escalated privileges; by malicious users to manipulate data, disclose sensitive information, or compromise a vulnerable system; and by malicious people to cause a DoS.

For more information:
SA23095
SA23751
SA23884
SA23937

Additionally, updated Amarok packages fix crashes in the magnatune.com album browser and incorrect quoting within the ruby handlers, which can potentially be exploited to inject and execute arbitrary shell commands.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Original Advisory
http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers