IBM Security Bulletin:

JRE update for IBM Spectrum Conductor with Spark for Java SE issues disclosed in the Oracle January 2018 Critical Patch Update (CVE-2018-2639, CVE-2018-2638, CVE-2018-2633, CVE-2018-2637, CVE-2018-2634, CVE-2018-2582, CVE-2018-2641, CVE-2018-2618, CVE-2018-2603, CVE-2018-2599, CVE-2018-2602, CVE-2018-2678, CVE-2018-2677, CVE-2018-2663, CVE-2018-2588, CVE-2018-2579, CVE-2018-1417)

CVE(s): CVE-2018-2579, CVE-2018-2588, CVE-2018-2663, CVE-2018-2677, CVE-2018-2678, CVE-2018-2602, CVE-2018-2599, CVE-2018-2603, CVE-2018-2618, CVE-2018-2641, CVE-2018-2582, CVE-2018-2634, CVE-2018-2637, CVE-2018-2633, CVE-2018-2638, CVE-2018-2639, CVE-2018-1417

Affected product(s) and affected version(s):

IBM Spectrum Conductor with Spark 2.2.0, and IBM Spectrum Conductor with Spark 2.2.1, which support Linux and Linux on POWERLE.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=isg3T1027315
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137841
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137917
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137932
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137933
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137851
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137870
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137893
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137836
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137886
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137889
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137890
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137891
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138823

The post IBM Security Bulletin: appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IUpWbY