IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sametime Community Server

OpenSSL vulnerabilities were disclosed on September 22, 2016 and September 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM Community Server Server. IBM Community Server has addressed the applicable CVEs.

CVE(s): CVE-2016-6303, CVE-2016-2182, CVE-2016-2178, CVE-2016-6302, CVE-2016-6304, CVE-2016-2179, CVE-2016-6306, CVE-2016-2177, CVE-2016-2180, CVE-2016-2181, CVE-2016-2183

Affected product(s) and affected version(s):

IBM Sametime Community Server aersion 9 HF1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vfROnG
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dR45pA
X-Force Database: http://ift.tt/2asKHex
X-Force Database: http://ift.tt/2dR4fNY
X-Force Database: http://ift.tt/2dmY7tO
X-Force Database: http://ift.tt/2dR5fBu
X-Force Database: http://ift.tt/2dmYpRr
X-Force Database: http://ift.tt/2aPXjQq
X-Force Database: http://ift.tt/2dmWOvf
X-Force Database: http://ift.tt/2dmXLUk
X-Force Database: http://ift.tt/2dR3VyC

The post IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Sametime Community Server appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2vy5hCC