IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Cast Iron (CVE-2016-5542, CVE-2016-5573, CVE-2016-5597)

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 SR9 FP40 and Version 6 SR16 FP26 used by WebSphere Cast Iron. These issues were disclosed as part of the IBM Java SDK updates in October 2016.

CVE(s): CVE-2016-5597, CVE-2016-5542, CVE-2016-5573

Affected product(s) and affected version(s):

WebSphere Cast Iron v 7.5.x.x
WebSphere Cast Iron v 7.0.0.x
WebSphere Cast Iron v 6.4.0.x
WebSphere Cast Iron v 6.3.0.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2jyMTUo
X-Force Database: http://ift.tt/2e5pD2s
X-Force Database: http://ift.tt/2e5s2Ku
X-Force Database: http://ift.tt/2eDrVCd

from IBM Product Security Incident Response Team http://ift.tt/2jQnZTF