IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cloud Manager with OpenStack

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.0.10.10 used by IBM Cloud Manager with OpenStack. These issues were disclosed as part of the IBM Java SDK updates in October 2017.

CVE(s): CVE-2017-10346, CVE-2017-10285, CVE-2017-10388, CVE-2017-10309, CVE-2016-10165, CVE-2017-10356, CVE-2017-10355, CVE-2017-10357, CVE-2017-10348, CVE-2017-10349, CVE-2017-10347, CVE-2017-10350, CVE-2017-10281, CVE-2017-10295, CVE-2017-10345, CVE-2017-10293

Affected product(s) and affected version(s):

IBM Cloud Manager with OpenStack 4.3 – 4.3.0.8 Interim Fix 1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2zcwikm
X-Force Database: http://ift.tt/2i6p9IF
X-Force Database: http://ift.tt/2jyFVAL
X-Force Database: http://ift.tt/2i6pawd
X-Force Database: http://ift.tt/2jyFXIT
X-Force Database: http://ift.tt/2i3qEHA
X-Force Database: http://ift.tt/2jyFZR1
X-Force Database: http://ift.tt/2jyG1s7
X-Force Database: http://ift.tt/2i6pg73
X-Force Database: http://ift.tt/2jy9C4Q
X-Force Database: http://ift.tt/2i3qIHk
X-Force Database: http://ift.tt/2jyG47h
X-Force Database: http://ift.tt/2i6pgE5
X-Force Database: http://ift.tt/2jy9EK0
X-Force Database: http://ift.tt/2i3Lmr1
X-Force Database: http://ift.tt/2jy9Ite
X-Force Database: http://ift.tt/2i3qHDg

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Cloud Manager with OpenStack appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2j6yvEN