SUSE has issued an update for multiple packages. This fixes multiple vulnerabilities, where some have an unknown impact and the others can be exploited by malicious, local users to manipulate certain data, conduct spoofing attacks, bypass certain security features, and gain escalated privileges and by malicious users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

For more information:
SA34723
SA37291
SA39454
SA39762
SA39792
SA40586
SA40775
SA40908
SA41004
SA41048
SA41290
SA41298
SA41340
SA41354
SA41434
SA41435
SA41684
SA41692
SA41791

NOTE: Additionally, a security issue exists in festival which insecurely uses the LD_LIBRARY_PATH environment variable and can be exploited to execute arbitrary code e.g. by tricking a user into running festival_server.

Solution
Apply updated packages via YaST Online Update or the SUSE FTP server.
Original Advisory
SUSE-SR:2010:019:
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers