SUSE-SU-2015:1689-1
- Source
- https://www.suse.com/support/update/announcement/2015/suse-su-20151689-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1689-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2015:1689-1
- Related
- Published
- 2015-09-16T08:47:54Z
- Modified
- 2025-05-02T04:04:40.448399Z
- Upstream
- Summary
- Security update for icedtea-web
- Details
-
The Java Plugin IcedTea Web was updated to 1.5.2, fixing bugs and security issues.
- permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all.
- fixed DownloadService
- RH1231441 Unable to read the text of the buttons of the security dialogue
- Fixed RH1233697 icedtea-web: applet origin spoofing (CVE-2015-5235, bsc#944208)
- Fixed RH1233667 icedtea-web: unexpected permanent authorization of unsigned applets (CVE-2015-5234, bsc#944209)
- MissingALACAdialog made available also for unsigned applications (but ignoring actual manifest value) and fixed
- References