Secunia Security Advisory – SUSE has issued an update for multiple packages. This fixes multiple vulnerabilities, a security issue, and a weakness, which can be exploited by malicious users to disclose potentially sensitive information, bypass certain security restrictions, conduct SQL injection attacks, and to compromise a vulnerable system and by malicious people to cause a DoS (Denial of Service), potentially compromise an application using the library, potentially compromise a vulnerable system, bypass certain security restrictions, and to conduct spoofing, script insertion, cross-site scripting, and cross-site request forgery attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/86375/sa38593.txt
Source: https://packetstormsecurity.com/files/86375/Secunia-Security-Advisory-38593.html