[Golden Eagle]

This is the part of yours I meant to post:

--you'd have to be running a defacto install with no security measures, and the connection to the specific server turned on.

Defacto install? Do you not understand how a patch process works, and understand no single one provides complete security? And of course it required a connection to the server, that's what you said you were doing, and obviously why I mentioned it. You must be trying to run these enterprise versions without paying for your patches. Since that's what you believe, verses getting all your updates for free, for the life of the product, like I get.

[rzeznikj at stout]

The point is that if you run the updates, this isn't an issue. You have to be running something straight out of the box (read: not updated) and subsequently connected to a manipulated server to see any major damage.

I ran an update right after I installed mine. The updated packages are on my system. I imagine a good portion (if not the outright vast majority) of Suse users run the updates regularly and have the problem fixed.

You're obviously not reading my posts--just exactly how many times do I have to tell you these things?