IBM Security Bulletin: A vulnerability in Java runtime from IBM affects IBM WebSphere MQ

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6, 7 and 8 that are used by IBM MQ. These issues were disclosed as part of the Java SDK updates from IBM in April 2017.

CVE(s): CVE-2017-3511, CVE-2017-3533, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843

Affected product(s) and affected version(s):

IBM MQ 9.0.0.x Long Term Support (LTS)
Maintenance level 9.0.0.0 only

IBM MQ 9.0.x Continuous Delivery Release (CDR)
Continuous delivery update 9.0.1 only

IBM MQ Appliance 9.0.x
Update 9.0.1 only

IBM MQ 8.0
Maintenance levels between 8.0.0.0 and 8.0.0.5

IBM MQ Appliance 8.0
Maintenance levels between 8.0.0.0 and 8.0.0.5

WebSphere MQ 7.5
Maintenance levels between 7.5.0.0 and 7.5.0.7

WebSphere MQ 7.1
Maintenance levels between 7.1.0.0 and 7.1.0.8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2f1tij8
X-Force Database: http://ift.tt/2pv7JaY
X-Force Database: http://ift.tt/2pv79tT
X-Force Database: http://ift.tt/2lLwOQm
X-Force Database: http://ift.tt/2mlzP6B
X-Force Database: http://ift.tt/2lLuetu
X-Force Database: http://ift.tt/2mlCjlv

The post IBM Security Bulletin: A vulnerability in Java runtime from IBM affects IBM WebSphere MQ appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2hgp0Fb