IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director (CVE-2016-2108,CVE-2016-2109,CVE-2016-2176)

OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM Systems Director. IBM Systems Director has addressed the applicable CVEs.

CVE(s): CVE-2016-2108, CVE-2016-2109, CVE-2016-2176

Affected product(s) and affected version(s):

IBM Systems Director:

· 5.2.x.x
· 6.1.x.x
· 6.2.0.x
· 6.2.1.x
· 6.3.0.0
· 6.3.1.0
· 6.3.1.1
· 6.3.2.0
· 6.3.2.1
· 6.3.2.2
· 6.3.3.0
· 6.3.3.1
· 6.3.5.0
· 6.3.6.0
· 6.3.7.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bv8MkU
X-Force Database: http://ift.tt/1VjTr9i
X-Force Database: http://ift.tt/1Z0wO8Z
X-Force Database: http://ift.tt/25mym4p

from IBM Product Security Incident Response Team http://ift.tt/2bv8Pxd