IBM Security Bulletin: Multiple Vulnerabilities in OpenSSL affect Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images

OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images. Tivoli Provisioning Manager for OS Deployment and Tivoli Provisioning Manager for Images have addressed the applicable CVEs

CVE(s): CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109, CVE-2016-2176

Affected product(s) and affected version(s):

IIBM Tivoli Provisioning Manager for Images 7.1.1.x

IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.x

IBM Tivoli Provisioning Manager for Images (and System X Edition) 7.1.1.x

IBM Tivoli Provisioning Manager for OS Deployment 5.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2fn8tNT
X-Force Database: http://ift.tt/1NwOQz5
X-Force Database: http://ift.tt/1NwOPLs
X-Force Database: http://ift.tt/25myFMu
X-Force Database: http://ift.tt/1Z0wO8Z
X-Force Database: http://ift.tt/25mym4p

from IBM Product Security Incident Response Team http://ift.tt/2fn3tsC