IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect PowerKVM

OpenSSL vulnerabilities were disclosed on March 3, 2016 and May 3, 2016 by the OpenSSL Project. OpenSSL is used by PowerKVM, which has addressed the applicable CVEs.

CVE(s): CVE-2016-2842, CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109

Affected product(s) and affected version(s):

PowerKVM 2.1 and PowerKVM 3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1VjT6n5
X-Force Database: http://ift.tt/24fOBfM
X-Force Database: http://ift.tt/1VjTr9i
X-Force Database: http://ift.tt/1NwOQz5
X-Force Database: http://ift.tt/1NwOPLs
X-Force Database: http://ift.tt/25myFMu
X-Force Database: http://ift.tt/1Z0wO8Z

from IBM PSIRT Blog http://ift.tt/1NS2xJ3