Jump to content
Compatible Support Forums
Sign in to follow this  

[security-announce] SUSE-SU-2013:1520-1: critical: Security update for icedtea-web

Recommended Posts

SUSE Security Update: Security update for icedtea-web



Announcement ID: SUSE-SU-2013:1520-1

Rating: critical

References: #840572

Cross-References: CVE-2012-4540 CVE-2013-4349

Affected Products:

SUSE Linux Enterprise Desktop 11 SP3

SUSE Linux Enterprise Desktop 11 SP2



An update that fixes two vulnerabilities is now available.

It includes one version update.





This icedtea-web update adds a missing fix for an

off-by-one heap-based buffer overflow.


bnc#840572: CVE-2013-4349: icedtea-web 1.4.1 fixes the

missing patch for CVE-2012-4540.


Security Issues:


* CVE-2012-4540


* CVE-2013-4349




Patch Instructions:


To install this SUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:


- SUSE Linux Enterprise Desktop 11 SP3:


zypper in -t patch sledsp3-icedtea-web-8358


- SUSE Linux Enterprise Desktop 11 SP2:


zypper in -t patch sledsp2-icedtea-web-8357


To bring your system up-to-date, use "zypper patch".



Package List:


- SUSE Linux Enterprise Desktop 11 SP3 (i586 x86_64) [New Version: 1.4.1]:




- SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64) [New Version: 1.4.1]:














To unsubscribe, e-mail: opensuse-security-announce+unsubscribe ( -at -) opensuse.org

For additional commands, e-mail: opensuse-security-announce+help ( -at -) opensuse.org




Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this