IBM Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack

Multiple security vulenrability have been identified in dnsmasq that is used by IBM Cloud Manager with OpenStack. IBM Cloud Manager with OpenStack has addressed the applicable CVEs.

CVE(s): CVE-2017-14495, CVE-2017-14494, CVE-2017-14496, CVE-2017-14493, CVE-2017-14492, CVE-2017-14491, CVE-2017-13704

Affected product(s) and affected version(s):

IBM Cloud Manager with OpenStack 4.3.0 through 4.3.0.8 Interim Fix 1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zcaVQd
X-Force Database: http://ift.tt/2j1mTTw
X-Force Database: http://ift.tt/2zc71Xs
X-Force Database: http://ift.tt/2j1mArQ
X-Force Database: http://ift.tt/2zcuqI8
X-Force Database: http://ift.tt/2j1mCQu
X-Force Database: http://ift.tt/2zbSTxi
X-Force Database: http://ift.tt/2j6ym4d

The post IBM Security Bulletin: Multiple security vulnerabilities in dnsmasq affect IBM Cloud Manager with OpenStack appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2zbZGXS