Hi, thanks for reporting this vulnerability, we will provide a fix asap. As a temporary solution, please set MAX_DAYS_IN_TMP in /etc/rc.config to 0. Please remember: always send vulnerability reports to security@suse.de (if you want to use pgp, get the public pgp key from www.suse.de/security - the finger print can be found at the end of the chapter "Security" of the SuSE Linux Book) Greets, Marc -- Marc Heuse, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: marc@suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~marc/marc.pgp | pgp -fka" Key fingerprint = B5 07 B6 4E 9C EF 27 EE 16 D9 70 D4 87 B5 63 6C