IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM OS Images for Red Hat Linux Systems, AIX-based, and Windows-based deployments Security Bulletin

Jul 3, 2018 9:00 am EDT

Categorized: High Severity

Share this post:

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7, used by the OS Images for IBM PureApplication System. Java 7 is used by IBM Base OS images. These issues were disclosed as part of the IBM Java SDK updates in January 2018. IBM OS Image for Red Hat Linux Systems has addressed the following vulnerabilities.

CVE(s): CVE-2018-2579 , CVE-2018-2588 , CVE-2018-2663 , CVE-2018-2677 , CVE-2018-2678 , CVE-2018-2602 , CVE-2018-2599 , CVE-2018-2603 , CVE-2018-2629 , CVE-2018-2657 , CVE-2018-2618 , CVE-2018-2641 , CVE-2018-2582 , CVE-2018-2634 , CVE-2018-2637 , CVE-2018-2633 , CVE-2018-2638 , CVE-2018-2639 , CVE-2018-1417

Affected product(s) and affected version(s):

OS Images for IBM PureApplication System V2.2.3.0
OS Images for IBM PureApplication System V2.2.3.1
OS Images for IBM PureApplication System V2.2.3.2
OS Images for IBM PureApplication System V2.2.4.0
OS Images for IBM PureApplication System V2.2.5.0
OS Images for IBM PureApplication System V2.2.5.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22016614
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137833
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137841
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137917
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137932
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137933
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137854
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137851
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137855
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137880
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137910
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137870
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137893
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137836
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137886
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137889
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137890
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/137891
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/138823

from IBM Product Security Incident Response Team https://ift.tt/2KJa8N1