This update for cinnamon fixes the following issues:
Security issue fixed:
- CVE-2018-13054: Fix symlink attack vulnerability (boo#1083067).
Bug fixes:
- Update to version 3.4.6 (changes since 3.4.4):
* osdWindow.js: Always check the theme node on first showing - an
actor's width isn't necessarily filled if it hasn't been explicitly
set, causing the first few activations of the OSD to not show an
accurate level bar.
* cs_default: Fix an incorrect button label (but preserve translations).
* main.js: Remove an obsolete Meta enum member reference.
* workspace.js: Use our normal prototype init method.
* workspace.js: Initalise WindowClone._zoomStep to 0.
* slideshow-applet: Fix a translation.
* cs_themes.py: Create the file "~/.icons/default/index.theme" and set
the selected cursor theme inside of it. This ensures other (non-gtk)
applications end up using the same theme (though they are required to
...
Read the Full AdvisoryPatch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 42.3:
zypper in -t patch openSUSE-2018-767=1
- openSUSE Leap 42.3 (x86_64):
cinnamon-3.4.6-2.3.1
cinnamon-debuginfo-3.4.6-2.3.1
cinnamon-debugsource-3.4.6-2.3.1
cinnamon-gschemas-3.4.6-2.3.1
- openSUSE Leap 42.3 (noarch):
cinnamon-gschemas-branding-upstream-3.4.6-2.3.1
https://www.suse.com/security/cve/CVE-2018-13054.html
https://bugzilla.suse.com/1083067
--
Get the latest Linux and open source security news straight to your inbox.