SUSE-SU-2019:2033-1

Description of the patch:

This update for icedtea-web to version 1.7.2 fixes the following issues:

Security issues fixed:

• CVE-2019-10181: Fixed an unsigned code injection in a signed JAR file (bsc#1142835)
• CVE-2019-10182: Fixed a path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite (bsc#1142825).
• CVE-2019-10185: Fixed a directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite (bsc#1142832).