RHBA-2015:2457

csafUSredhat_csaf

Red Hat Bug Fix Advisory: icedtea-web bug fix and enhancement update

view advisory published 2015-11-19

Updated icedtea-web packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2015-5235USmedium4.3OT elevated—
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick us…
CVE-2015-5234USmedium6.8—
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration…
02

references

External citations — patches, advisories, analysis.

03

remediations (28)

  • Fixedicedtea-web-0:1.6.1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-debuginfo-0:1.6.1-4.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
  • Fixedicedtea-web-javadoc-0:1.6.1-4.el7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHBA-2015:2457
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan