RHBA-2015:0572 - Bug Fix Advisory

Topic

Updated icedtea-web packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7.

Description

The IcedTea-Web project provides a Java web browser plug-in and an
implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. IcedTea-Web now also contains policyeditor - a simple tool to configure java policies.

The icedtea-web packages have been upgraded to upstream version 1.5.2, which provides a number of bug fixes and enhancements over the previous version. Among the most significant features, a new development console has been added. In addition, fully and partially signed applets can now be run without granting them All-Permission when the "Sandbox" button on security dialogs is used. The user can also configure specific permissions that are to be granted. (BZ#1075793)

This update also fixes the following bug:

• Previously, the Red Hat Enterprise Linux 7 spec file for the icedtea-web

packages used the "./configure" file rather than the "%configure" file. As a consequence, the GNU config.guess and config.sub scripts did not work correctly, which led to aarch64 not being a recognized architecture. To fix this bug, "./configure" has been changed to "%configure", and icedtea-web now builds successfully. (BZ#1077287)

Users of icedtea-web are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1075793 - Update IcedTea-Web to 1.5 in RHEL-7.1

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal