IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®.

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6.0.16.55 and earlier, 6.1.8.55 and earlier, 7.0.10.15 and earlier, 7.1.4.15 and earlier, 8.0.5.7 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in January 2018.

CVE(s): CVE-2018-2579, CVE-2018-2678, CVE-2018-2618, CVE-2018-2602

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V9.7, V10.1, V10.5, and V11.1 editions on all platforms are affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22015656
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137933
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137870
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®. appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2IHbsf2