Please Install the Updated Packages.

Fixed CVE-2013-3709: make the secret token file (secret_token.rb) readable only for the webyast user to avoid forging the session cookie (bnc#851116)

Fixes on openSUSE 12.3

• http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00012.html

---

Updated on 2015-03-25