SUSE has issued an update for multiple packages. This fixes a weakness and multiple vulnerabilities, which can be exploited by malicious, local users to disclose sensitive information and gain escalated privileges and by malicious people to conduct HTTP response splitting attacks, bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

For more information:
SA39661
SA40112
SA40783
SA41535
SA41841
SA42290
SA42373
SA42461
SA42473
SA42732

1) The supportconfig script stores user passwords in an insecure manner and can be exploited to disclose the passwords.

Solution
Apply updated packages via YaST Online Update or the SUSE FTP server.
Original Advisory
SUSE-SR:2011:001:
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers