openSUSE Security Update : icedtea-web (openSUSE-SU-2013:1509-1)

This icedtea-web update fixes several security issues. Changes in icedtea-web : - update to 1.4.1 bnc840572 - Improved and cleaned Temporary internet files panel - NetX - PR1465 - java.io.FileNotFoundException while trying to download a JAR file - PR1473 - javaws should not depend on name of loca...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:1663-1)

Update to icedtea 2.4.3 bnc846999 synchronized OpenJDK 7 support with the upstream u45 b31 fixes the following issues : - S8006900, CVE-2013-3829: Add new date/time capability - S8008589: Better MBean permission validation - S8011071, CVE-2013-5780: Better crypto provider handling - S8011081,...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:1424-1) (ROBOT)

java 1.6.0 openjdk / icedtea was updated to 1.11.5 bnc785433 - Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7167656, CVE-2012-5077: Multiple Seeders...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0964-1)

update to icedtea-2.3.9 bnc816720 - Security fixes - S6657673, CVE-2013-1518: Issues with JAXP - S7200507: Refactor Introspector internals - S8000724, CVE-2013-2417: Improve networking serialization - S8001031, CVE-2013-2419: Better font processing - S8001040, CVE-2013-1537: Rework RMI model -...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0735-1)

update to 1.3.2 bnc815596 - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin is...

openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0706-1)

Icedtea as included in java-160-openjdk was updated to fix several security issues : dbg114-icedtea-web-4788 icedtea-web-4788 newupdateinfo S6213702, CVE-2011-0872: so non-blocking sockets with TCP urgent disabled get still selected for read ops win dbg114-icedtea-web-4788 icedtea-web-4788...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2012:1175-1)

The icedtea-web Java plugin was updated to 1.11.4 to fix critical security issues : - Security fixes - S7162476, CVE-2012-1682: XMLDecoder security issue via ClassFinder - S7163201, CVE-2012-0547: Simplify toolkit internals references - OpenJDK - S7182135: Impossible to use some editors directly ...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0981-1)

update to 1.2.1 bnc773458 - Security Updates - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings - NetX - PR898: signed applications with big jnlp-file doesn't start webstart affect like 'frozen'...

openSUSE Security Update : icedtea-web (openSUSE-SU-2012:0982-1)

This update of icedtea-web fixed multiple hewap buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-513. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:0509-1)

java-170-openjdk was updated to icedtea-2.3.7 bnc809386 : - Security fixes - S8007014, CVE-2013-0809: Improve image handling - S8007675, CVE-2013-1493: Improve color conversion - Backports - S8002344: Krb5LoginModule config class does not return proper KDC list from DNS - S8004344: Fix a crash in...

openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0829-1)

This update of icedtea/icedtea-web fixes two issues : - CVE-2011-2513: CVSS v2 Base Score: 4.3: An information leak allows unsigned Web Start applications to determine the path to the cache directory used to store downloaded class and jar files. - CVE-2011-2514: CVSS v2 Base Score: 5.1 An unsigne...

openSUSE Security Update : icedtea-web (openSUSE-SU-2011:1251-1)

Update to version 1.1.4 of icedtea-web to fix the following issues : - CVE-2011-3377: IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass - PR778: Jar download and server certificate verification deadlock %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE Security Update : icedtea-web (openSUSE-SU-2011:1251-1)

Update to version 1.1.4 of icedtea-web to fix the following issues : - CVE-2011-3377: IcedTea-Web: second-level domain subdomains and suffix domain SOP bypass - PR778: Jar download and server certificate verification deadlock %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:1017-1)

This update of IcedTea fixes an information leak in System property via public static. CVE-2010-3860 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update java-160-openjdk-3618. The text description...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:1288-1)

java-170-openjdk was updated to icedtea-2.4.1 bnc828665 - Security fixes - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improv...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0897-1)

update to 1.3.2 bnc815596 - Security Updates - CVE-2013-1927, RH884705: fixed gifar vulnerability - CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path. - Common - Added new option in itw-settings which allows users to set JVM arguments when plugin is...

openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0893-1)

Changes in icedtea-web with update to 1.4 bnc818768 : - Added cs, de, pl localization - Splash screen for javaws and plugin - Better error reporting for plugin via Error-splash-screen - All IcedTea-Web dialogues are centered to middle of active screen - Download indicator made compact for more th...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0430-1)

java-160-openjdk aka IcedTea was updated to 1.12.4 bnc807487 - S8007014, CVE-2013-0809: Improve image handling - S8007675, CVE-2013-1493: Improve color conversion %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2010:0957-1)

Icedtea included in java-160-openjdk was updated to version 1.7.5/1.8.2/1.9.1 to fix several security issues : - S6914943, CVE-2009-3555: TLS: MITM attacks via session renegotiation - S6559775, CVE-2010-3568: OpenJDK Deserialization Race condition - S6891766, CVE-2010-3554: OpenJDK corba reflecti...

CVE-2011-2514

The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...