SUSE-SU-2015:1689-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2015:1689-1

Related

Published

2015-09-16T08:47:54Z

Modified

2015-09-16T08:47:54Z

Summary

Security update for icedtea-web

Details

The Java Plugin IcedTea Web was updated to 1.5.2, fixing bugs and security issues.

permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all.
fixed DownloadService
RH1231441 Unable to read the text of the buttons of the security dialogue
Fixed RH1233697 icedtea-web: applet origin spoofing (CVE-2015-5235, bsc#944208)
Fixed RH1233667 icedtea-web: unexpected permanent authorization of unsigned applets (CVE-2015-5234, bsc#944209)
MissingALACAdialog made available also for unsigned applications (but ignoring actual manifest value) and fixed

References

Affected packages

Name: icedtea-web
Purl: pkg:rpm/suse/icedtea-web&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-0.9.1

{
    "binaries": [
        {
            "icedtea-web": "1.5.3-0.9.1"
        }
    ]
}