yast2-core-devel: YaST2 - Include Files and Documentation for Core Libraries
----------------------------------------------------------------------
File: yast2-core-devel-2.14.5-0.1.ppc.rpm
Patchrpm: yast2-core-devel-2.14.5-0.1.ppc.patch.rpm
Version: 2.14.5-0.1
Size: 2492 kB
Patchsize: 1379 kB
Date: Tue 06 Nov 2007 2:22:17 CET
Source: yast2-core-2.14.5-0.1.src.rpm
Security: Yes
----------------------------------------------------------------------
Description: This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory (i.e. /tmp). 
Thanks to Stefan Nordhausen for reporting this to us.