Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 13.04 USN-1907-2: IcedTea Web Update Critical Threats

ubuntu
Calendar Grey July 16, 2013
Scroller Ubuntu
Keep informed about improvements to IcedTea Web in Ubuntu, including updates on significant security flaws addressed in OpenJDK.
IcedTea Web updated to work with new OpenJDK 7.

Summary

IcedTea Web updated to work with new OpenJDK 7.

Software Description:

- icedtea-web: A web browser plugin to execute Java applets

Details:

USN-1907-1 fixed vulnerabilities in OpenJDK 7. Due to upstream changes,

IcedTea Web needed an update to work with the new OpenJDK 7.

Original advisory details:

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure and data integrity. An attacker could exploit these

to expose sensitive data over the network. (CVE-2013-1500, CVE-2013-2454,

CVE-2013-2458)

A vulnerability was discovered in the OpenJDK Javadoc related to data

integrity. (CVE-2013-1571)

A vulnerability was discovered in the OpenJDK JRE related to information

disclosure and availability. An attacker could exploit this to cause a

denial of service or expose sensitive data over the network.

(CVE-2013-2407)

Several vulnerabilities were discovered in the OpenJDK JRE related to

information disclosure. An a...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu information disclosure IcedTea

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  icedtea-netx                    1.3.2-1ubuntu1.1

Ubuntu 12.10:
  icedtea-netx                    1.3.2-1ubuntu0.12.10.2

Ubuntu 12.04 LTS:
  icedtea-netx                    1.2.3-0ubuntu0.12.04.3

After a standard system update you need to restart your browser to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1907-2

https://ubuntu.com/security/notices/USN-1907-1

https://bugs.launchpad.net/ubuntu/+source/icedtea-web/+bug/1201908

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1907-2

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu information disclosure IcedTea

Package Information

https://launchpad.net/ubuntu/+source/icedtea-web/1.3.2-1ubuntu1.1
https://launchpad.net/ubuntu/+source/icedtea-web/1.3.2-1ubuntu0.12.10.2
https://launchpad.net/ubuntu/+source/icedtea-web/1.2.3-0ubuntu0.12.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.