IBM Security Bulletin: IBM® DB2® LUW on AIX and Linux Affected by a Vulnerability in GPFS (CVE-2016-2119 )

DB2 LUW is affected by a vulnerability in IBM® Spectrum Scale Version 4.1.1 that is used by DB2® pureScale™ Feature on AIX and Linux.

CVE(s): CVE-2016-2119

Affected product(s) and affected version(s):

All fix pack levels of IBM DB2 V10.5 and V11.1.1 editions listed below, running on AIX and Linux are affected, and only for those customers who have DB2® pureScale™ Feature installed.

IBM DB2 Enterprise Server Edition
IBM DB2 Workgroup Server Edition
IBM DB2 Advanced Enterprise Server Edition
IBM DB2 Advanced Workgroup Server Edition
IBM DB2 Direct Advanced Edition
IBM DB2 Direct Standard Edition

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hTRdO5
X-Force Database: http://ift.tt/2cRlID1

from IBM Product Security Incident Response Team http://ift.tt/2hTN78m