This icedtea-web update adds a missing fix for an
off-by-one heap-based buffer overflow.
bnc#840572: CVE-2013-4349: icedtea-web 1.4.1 fixes the
missing patch for CVE-2012-4540.
Security Issues:
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
SUSE Linux Enterprise Desktop | 11.3 | x86_64 | icedtea-web | < 1.4.1-0.11.1 | icedtea-web-1.4.1-0.11.1.x86_64.rpm |
SUSE Linux Enterprise Desktop | 11.3 | i586 | icedtea-web | < 1.4.1-0.11.1 | icedtea-web-1.4.1-0.11.1.i586.rpm |
SUSE Linux Enterprise Desktop | 11.2 | i586 | icedtea-web | < 1.4.1-0.8.1 | icedtea-web-1.4.1-0.8.1.i586.rpm |
SUSE Linux Enterprise Desktop | 11.2 | x86_64 | icedtea-web | < 1.4.1-0.8.1 | icedtea-web-1.4.1-0.8.1.x86_64.rpm |