IBM Security Bulletin: IBM Cloud Orchestrator and Cloud Orchestrator Enterprise update of IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ Version that is provided with IBM WebSphere Application Server. These issues were disclosed as part of the IBM Java SDK updates for July 2017 CPU. These issues were addressed by IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise.

CVE(s): CVE-2017-10198, CVE-2017-10125, CVE-2017-10067, CVE-2017-10115, CVE-2017-10118, CVE-2017-10176, CVE-2017-10078, CVE-2017-10074, CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10116, CVE-2017-10102, CVE-2017-10087, CVE-2017-10089, CVE-2017-10107, CVE-2017-10110, CVE-2017-10111, CVE-2017-1376, CVE-2017-10193, CVE-2017-10081, CVE-2017-10105, CVE-2017-10053, CVE-2017-10108, CVE-2017-10109, CVE-2017-10135, CVE-2017-10243

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2B59QM4
X-Force Database: http://ift.tt/2vQpmnS
X-Force Database: http://ift.tt/2vfEyLU
X-Force Database: http://ift.tt/2x4YZ1U
X-Force Database: http://ift.tt/2xsr7ZC
X-Force Database: http://ift.tt/2vQnzPT
X-Force Database: http://ift.tt/2wpoWsl
X-Force Database: http://ift.tt/2wEm9Mt
X-Force Database: http://ift.tt/2vEUffF
X-Force Database: http://ift.tt/2x52Goj
X-Force Database: http://ift.tt/2x4LWxw
X-Force Database: http://ift.tt/2x4P6Bt
X-Force Database: http://ift.tt/2wyaY8O
X-Force Database: http://ift.tt/2veVuCa
X-Force Database: http://ift.tt/2x52GEP
X-Force Database: http://ift.tt/2vEW7Fc
X-Force Database: http://ift.tt/2vECPQw
X-Force Database: http://ift.tt/2x4P64r
X-Force Database: http://ift.tt/2vENxqi
X-Force Database: http://ift.tt/2vfk1Hi
X-Force Database: http://ift.tt/2wpoYAt
X-Force Database: http://ift.tt/2vEjNtH
X-Force Database: http://ift.tt/2x588Yf
X-Force Database: http://ift.tt/2wEhie8
X-Force Database: http://ift.tt/2vff6pW
X-Force Database: http://ift.tt/2vEvu3j
X-Force Database: http://ift.tt/2wp6HTz
X-Force Database: http://ift.tt/2vQ1oZY

The post IBM Security Bulletin: IBM Cloud Orchestrator and Cloud Orchestrator Enterprise update of IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ appeared first on IBM PSIRT Blog.

Principal Product and Version(s)	Affected Supporting Product and Version
IBM Cloud Orchestrator and Cloud Orchestrator Enterprise V2.3, V2.3.0.1	IBM WebSphere Application Server V8.0.0.1 to V8.0.0.11

from IBM Product Security Incident Response Team http://ift.tt/2B8uE5a