OpenSSL vulnerabilities were disclosed in March 2016 by the OpenSSL Project. OpenSSL is used by SAN Volume Controller and Storwize Family. SAN Volume Controller and Storwize Family has addressed the applicable CVEs.
CVE(s): CVE-2016-0797, CVE-2016-0705
Affected product(s) and affected version(s):
IBM SAN Volume Controller
IBM Storwize V7000
IBM Storwize V5000
IBM Storwize V3700
IBM Storwize V3500
All products are affected when running supported releases 7.1 to 7.6.
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/28LvZm9
X-Force Database: http://ift.tt/1Tg5wqQ
X-Force Database: http://ift.tt/1Tg5wqO
from IBM Product Security Incident Response Team http://ift.tt/28KX70I
No comments:
Post a Comment
Note: Only a member of this blog may post a comment.