IBM Security Bulletin: Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition

Nov 30, 2017 9:01 am EST

Categorized: High Severity

Share this post:

Java SE issues disclosed in the Oracle October 2017 Critical Patch Update

CVE(s): CVE-2017-10346, CVE-2017-10285, CVE-2017-10388, CVE-2017-10309, CVE-2016-10165, CVE-2017-10356, CVE-2017-10293, CVE-2017-10355, CVE-2017-10357, CVE-2017-10348, CVE-2017-10349, CVE-2017-10347, CVE-2017-10350, CVE-2017-10281, CVE-2017-10295, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-10345

Affected product(s) and affected version(s):

IBM SDK, Java Technology Edition, Version 6 Service Refresh 16 Fix Pack 50 and earlier releases
IBM SDK, Java Technology Edition, Version 6R1 Service Refresh 8 Fix Pack 50 and earlier releases
IBM SDK, Java Technology Edition, Version 7 Service Refresh 10 Fix Pack 10 and earlier releases
IBM SDK, Java Technology Edition, Version 7R1 Service Refresh 4 Fix Pack 10 and earlier releases
IBM SDK, Java Technology Edition, Version 8 Service Refresh 5 Fix Pack 1 and earlier releases

NOTE: These releases are affected by CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, on Solaris, HP-UX and Mac OS only. For all other platforms, the fixes were provided in earlier releases.

For detailed information on which CVEs affect which releases, please refer to the IBM SDK, Java Technology Edition Security Vulnerabilities page.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2jy9wKw
X-Force Database: http://ift.tt/2i6p9IF
X-Force Database: http://ift.tt/2jyFVAL
X-Force Database: http://ift.tt/2i6pawd
X-Force Database: http://ift.tt/2jyFXIT
X-Force Database: http://ift.tt/2i3qEHA
X-Force Database: http://ift.tt/2jyFZR1
X-Force Database: http://ift.tt/2i3qHDg
X-Force Database: http://ift.tt/2jyG1s7
X-Force Database: http://ift.tt/2i6pg73
X-Force Database: http://ift.tt/2jy9C4Q
X-Force Database: http://ift.tt/2i3qIHk
X-Force Database: http://ift.tt/2jyG47h
X-Force Database: http://ift.tt/2i6pgE5
X-Force Database: http://ift.tt/2jy9EK0
X-Force Database: http://ift.tt/2i3Lmr1
X-Force Database: http://ift.tt/2lLwOQm
X-Force Database: http://ift.tt/2mlzP6B
X-Force Database: http://ift.tt/2lLuetu
X-Force Database: http://ift.tt/2mlCjlv
X-Force Database: http://ift.tt/2jy9Ite

from IBM Product Security Incident Response Team http://ift.tt/2i6phI9