ELSA-2013-0753

ELSA-2013-0753 - icedtea-web security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2013-04-17

Description

[1.2.3-2]
- Added (temporally!) posttrans forcing creation of symlinks
- should be removed next release
- Resolves: rhbz#949094

[1.2.3-1]
- fixed postun - removal of alternatives for plugin restricted to
(correct) removal process only
- fixed date in changelog previous entry
- Resolves: rhbz#949094

[1.2.3-0]
- Updated to latest ustream release of 1.2 branch - 1.2.3
- Security Updates
- CVE-2013-1927, RH884705 - fixed gifar vulnerability
- CVE-2013-1926, RH916774: Class-loader incorrectly shared for applets with same relative-path.
- Common
- PR1161: X509VariableTrustManager does not work correctly with OpenJDK7
- Plugin
- PR1157: Applets can hang browser after fatal exception
- Removed upstreamed patch 0- icedtea-web-PR1161.patch
- Resolves: rhbz#949094

Related CVEs

CVE-2013-1926

CVE-2013-1927

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	icedtea-web-1.2.3-2.el6_4.src.rpm	39a9c0a5736d0f2e4b1205bff1dcc537	ELBA-2018-1880
	icedtea-web-1.2.3-2.el6_4.i686.rpm	1f324c636940f192e319de7cb3af2204	ELBA-2018-1880
	icedtea-web-javadoc-1.2.3-2.el6_4.i686.rpm	e6e798ac393ae19e2b73b655df2cb0ff	ELBA-2018-1880
Oracle Linux 6 (x86_64)	icedtea-web-1.2.3-2.el6_4.src.rpm	39a9c0a5736d0f2e4b1205bff1dcc537	ELBA-2018-1880
	icedtea-web-1.2.3-2.el6_4.x86_64.rpm	10031e7ef0907bb3d71bf2a431c5d1e0	ELBA-2018-1880
	icedtea-web-javadoc-1.2.3-2.el6_4.x86_64.rpm	8cd09e6188431e73da07741137357418	ELBA-2018-1880

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team