Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 11.04 & 11.10 USN-1505-2 Critical: IcedTea-Web Regression Fix

ubuntu
Calendar Grey August 30, 2012
Scroller Ubuntu
Ubuntu Security Announcement USN-1506-3 addresses a regression in IcedTea-Web impacting the Firefox browser.
USN 1505-1 introduced a regression in the IcedTea-Web Java web browserplugin that prevented it from working with the Chromium web browser.

Summary

USN 1505-1 introduced a regression in the IcedTea-Web Java web browser

plugin that prevented it from working with the Chromium web browser.

Software Description:

- icedtea-web: A web browser plugin to execute Java applets

Details:

USN-1505-1 fixed vulnerabilities in OpenJDK 6. As part of the update,

IcedTea-Web packages were upgraded to a new version. That upgrade

introduced a regression which prevented the IcedTea-Web plugin from

working with the Chromium web browser in Ubuntu 11.04 and Ubuntu 11.10.

This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that multiple flaws existed in the CORBA (Common

Object Request Broker Architecture) implementation in OpenJDK. An

attacker could create a Java application or applet that used these

flaws to bypass Java sandbox restrictions or modify immutable object

data. (CVE-2012-1711, CVE-2012-1719)

It was discovered that multiple flaws existed in the OpenJDK font

manager's...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory ubuntu regression browser plugin java applet icedtea-web chromium

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  icedtea-6-plugin                1.2-2ubuntu0.11.10.3

Ubuntu 11.04:
  icedtea-6-plugin                1.2-2ubuntu0.11.04.3

After a standard system update you need to restart your web browser
to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1505-2

https://ubuntu.com/security/notices/USN-1505-1

https://bugs.launchpad.net/ubuntu/+source/icedtea-web/+bug/1025553

Severity
critical
Lowest
Low
Medium
High
Critical

August 30, 2012

Topics%20covered

Topics Covered

security advisory ubuntu regression browser plugin java applet icedtea-web chromium

Package Information

https://launchpad.net/ubuntu/+source/icedtea-web/1.2-2ubuntu0.11.10.3
https://launchpad.net/ubuntu/+source/icedtea-web/1.2-2ubuntu0.11.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.