SUSE has issued an update for multiple packages. This fixes a security issue and some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to bypass certain security restrictions, disclose sensitive information, cause a DoS (Denial of service), or compromise a vulnerable system.

For more information:
SA30621
SA32651
SA32991
SA33311
SA33485
SA34035
SA34138

1) A SUSE specific patch for GTK2 caused GTK2 programs to search for modules in untrusted search paths. This can be exploited to execute arbitrary code with privileges of the user running the affected binaries by causing the binaries to load a malicious shared library.

Solution
Apply updated packages via YaST Online Update or the SUSE FTP server.
Original Advisory
SUSE-SR:2009:006:
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area