IBM Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

Multiple vulnerabilities have been identified in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util. coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util shipped with IBM SmartCloud Entry Appliance. IBM SmartCloud Entry Appliance has addressed the vulnerabilities.

CVE(s): CVE-2017-2616, CVE-2016-0634, CVE-2016-7543, CVE-2016-9401, CVE-2017-3136, CVE-2017-3137, CVE-2017-3139, CVE-2017-5461, CVE-2015-5203, CVE-2015-5221, CVE-2016-10248, CVE-2016-10249, CVE-2016-10251, CVE-2016-1577, CVE-2016-1867, CVE-2016-2089, CVE-2016-2116, CVE-2016-8654, CVE-2016-8690, CVE-2016-8691, CVE-2016-8692, CVE-2016-8693, CVE-2016-8883, CVE-2016-8884, CVE-2016-8885, CVE-2016-9262, CVE-2016-9387, CVE-2016-9388, CVE-2016-9389, CVE-2016-9390, CVE-2016-9391, CVE-2016-9392, CVE-2016-9393, CVE-2016-9394, CVE-2016-9560, CVE-2016-9583, CVE-2016-9591, CVE-2016-9600, CVE-2017-8779, CVE-2017-7502, CVE-2017-1000367

Affected product(s) and affected version(s):

IBM SmartCloud Entry Appliance 2.3.0 through 2.3.0.4 fix pack 10,
IBM SmartCloud Entry Appliance 2.4.0 through 2.4.0.4 fix pack 10,
IBM SmartCloud Entry Appliance 3.1.0 through 3.1.0.4 fix pack 25,
IBM SmartCloud Entry Appliance 3.2.0 through 3.2.0.4 fix pack 25

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2h8WPbj
X-Force Database: http://ift.tt/2eUcpqf
X-Force Database: http://ift.tt/2mMjKr9
X-Force Database: http://ift.tt/2mkL7MQ
X-Force Database: http://ift.tt/2h99Hy7
X-Force Database: http://ift.tt/2q2NYu4
X-Force Database: http://ift.tt/2pzgwZi
X-Force Database: http://ift.tt/2t2tHHQ
X-Force Database: http://ift.tt/2h8WTrz
X-Force Database: http://ift.tt/2eTEWfG
X-Force Database: http://ift.tt/2h99Mlp
X-Force Database: http://ift.tt/2eUctGv
X-Force Database: http://ift.tt/2h8WVQd
X-Force Database: http://ift.tt/2eTEYUQ
X-Force Database: http://ift.tt/2h8WXHP
X-Force Database: http://ift.tt/2eTF0vW
X-Force Database: http://ift.tt/2h99QSb
X-Force Database: http://ift.tt/2eTF12Y
X-Force Database: http://ift.tt/2h99T0j
X-Force Database: http://ift.tt/2eUczhl
X-Force Database: http://ift.tt/2h8WZPX
X-Force Database: http://ift.tt/2eUcBWv
X-Force Database: http://ift.tt/2h99Wt1
X-Force Database: http://ift.tt/2eUcEl9
X-Force Database: http://ift.tt/2h99Xx5
X-Force Database: http://ift.tt/2eUcFpd
X-Force Database: http://ift.tt/2h8X1Y5
X-Force Database: http://ift.tt/2eUc2Mm
X-Force Database: http://ift.tt/2h99ZoH
X-Force Database: http://ift.tt/2eUcGth
X-Force Database: http://ift.tt/2h8X3PH
X-Force Database: http://ift.tt/2eUcHgP
X-Force Database: http://ift.tt/2h8X4TL
X-Force Database: http://ift.tt/2eUcI4n
X-Force Database: http://ift.tt/2h9a2kn
X-Force Database: http://ift.tt/2eUcIBp
X-Force Database: http://ift.tt/2h8X6el
X-Force Database: http://ift.tt/2eU9PR7
X-Force Database: http://ift.tt/2h9a4sv
X-Force Database: http://ift.tt/2eTsjBt
X-Force Database: http://ift.tt/2h8X71T
X-Force Database: http://ift.tt/2eUcM47

The post IBM Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2eT7p5y