IBM Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System

Vulnerabilities in openSSL, glibc, curl, and VMWare that are used in IBM PureApplication System. IBM PureApplication System has addressed these vulnerabilities.

CVE(s): CVE-2018-1000301, CVE-2018-11237, CVE-2018-0737, CVE-2018-0732, CVE-2019-5518, CVE-2019-5519

Affected product(s) and affected version(s):

IBM PureApplication System V2.2.3.0
IBM PureApplication System V2.2.3.1
IBM PureApplication System V2.2.3.2
IBM PureApplication System V2.2.4.0
IBM PureApplication System V2.2.5.0
IBM PureApplication System V2.2.5.1
IBM PureApplication System V2.2.5.2
IBM PureApplication System V2.2.5.3

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10885604
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143390
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/143580
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141679
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144658
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158820
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/158821

The post IBM Security Bulletin: Multiple open source vulnerabilities affect IBM PureApplication System appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ibm.co/2EIlRHC