IBM Security Bulletin: Vulnerabilities in cURL/libcurl affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter

IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the applicable CVEs in cURL/libcurl. Vulnerability Details

CVE(s): CVE-2016-8619, CVE-2016-8621

Affected product(s) and affected version(s):

Product	Affected Version
IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware	9.1
QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter	7.10
QLogic Virtual Fabric Extension Module for IBM BladeCenter	9.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2sifId8
X-Force Database: http://ift.tt/2rJ0d0H
X-Force Database: http://ift.tt/2ps7LTj

The post IBM Security Bulletin: Vulnerabilities in cURL/libcurl affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2rJ0f8P