IBM Security Bulletin: Vulnerability in lquerylv in LVM impacts AIX (CVE-2016-6079)

There is a vulnerability in lquerylv in LVM that impacts AIX.

CVE(s): CVE-2016-6079

Affected product(s) and affected version(s):

         AIX 5.3, 6.1, 7.1, 7.2
        VIOS 2.2.x

        The following fileset levels are vulnerable:
        
        key_fileset = aix

        Fileset                 Lower Level  Upper Level KEY 
        ---------------------------------------------------------
        bos.rte.lvm             5.3.12.0     5.3.12.8    key_w_fs
        bos.rte.lvm             6.1.9.0      6.1.9.101   key_w_fs
        bos.rte.lvm             7.1.3.0      7.1.3.47    key_w_fs
        bos.rte.lvm             7.1.4.0      7.1.4.1     key_w_fs
        bos.rte.lvm             7.2.0.0      7.2.0.1     key_w_fs
        
        Note:  To find out whether the affected filesets are installed 
        on your systems, refer to the lslpp command found in the AIX
        user's guide.

        Example:  lslpp -L | grep -i bos.rte.lvm 

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://aix.software.ibm.com/aix/efixes/security/lquerylv_advisory.asc
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/117554

from IBM Product Security Incident Response Team https://www.ibm.com/blogs/psirt/ibm-security-bulletin-vulnerability-in-lquerylv-in-lvm-impacts-aix-cve-2016-6079/