Secunia

SUSE has issued an update for multiple packages. This fixes a weakness, security issues, and vulnerabilities, where some have unknown impacts and others can be exploited by malicious people with physical access to bypass certain security restrictions and by malicious people to bypass certain security restrictions, disclose system information, manipulate certain data, disclose potentially sensitive information, cause a DoS (Denial of Service), or compromise a vulnerable system.

For more information:
SA35326
SA37255
SA37699
SA37852
SA38316
SA38454

1) The "mount.cifs" utility does not properly sanitise certain input, which can be exploited to corrupt the /etc/mtab file.

Successful exploitation requires that "mount.cifs" is setuid root (not setuid root by default).

Solution
Apply updated packages via YaST Online Update or the SUSE FTP server.
Original Advisory
SUSE-SR:2010:008:
http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area