SUSE has issued an update for multiple packages. This fixes some security issues and vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions or cause a DoS (Denial of Service), and by malicious people to conduct spoofing attacks, disclose sensitive information, conduct cross-site script and HTTP response splitting attacks, and compromise a vulnerable system.

For more information:
SA25073
SA30111
SA32964
SA33047
SA33293
SA33980
SA33406
SA34081
SA34430
SA34468
SA34567

A security issue is caused due to the "/var/run/multipathd.sock" being world-writable, which can be exploited to e.g. send arbitrary commands to the multipath daemon.

Solution
Apply updated packages using YaST Online Update or the SUSE FTP server.
Original Advisory
SUSE-SR:2009:008:
http://www.novell.com/linux/security/advisories/2009_8_sr.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers