Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | icedtea-web | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | icedtea-web-debuginfo | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | icedtea-web-devel | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::client | icedtea-web-javadoc | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | icedtea-web | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | icedtea-web-debuginfo | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | icedtea-web-devel | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::server | icedtea-web-javadoc | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | icedtea-web | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | icedtea-web-debuginfo | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | icedtea-web-devel | 0:1.7.1-2.el7_6 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | icedtea-web-javadoc | 0:1.7.1-2.el7_6 |
Vulnerabilities 3
-
High 8.2
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files…
-
High 8.2
It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extra…
-
Medium 6.3
It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file wi…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724958
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1724989
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1725928
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2003.json
-
report
https://access.redhat.com/security/cve/CVE-2019-10181
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10181
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10181
-
report
https://access.redhat.com/security/cve/CVE-2019-10182
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10182
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10182
-
report
https://access.redhat.com/security/cve/CVE-2019-10185
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10185
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10185