Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU – Jan 2020 – Includes Oracle Jan 2020 CPU minus CVE-2020-2585, CVE-2020-2654, and CVE-2020-2590

There are multiple vulnerabilities in IBM® SDK Java Technology Edition, Versions 8** that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
RSAD and RSAD4WS	9.5 to 9.5.0.3
RSAD and RSAD4WS	9.6 to 9.6.1.4
RSAD and RSAD4WS	9.7 to 9.7.0.2

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6218246

The post Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU – Jan 2020 – Includes Oracle Jan 2020 CPU minus CVE-2020-2585, CVE-2020-2654, and CVE-2020-2590 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2yR36Sw