IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SmartCloud Entry

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7.0.10.5 used by IBM SmartCloud Entry. These issues were disclosed as part of the IBM Java SDK updates in Jul 2017.

CVE(s): CVE-2017-10198, CVE-2017-10125, CVE-2017-10067, CVE-2017-10115, CVE-2017-10118, CVE-2017-10176, CVE-2017-10078, CVE-2017-10074, CVE-2017-10090, CVE-2017-10096, CVE-2017-10101, CVE-2017-10116, CVE-2017-10102, CVE-2017-10087, CVE-2017-10089, CVE-2017-10107, CVE-2017-10110, CVE-2017-10111, CVE-2017-1376, CVE-2017-10193, CVE-2017-10081, CVE-2017-10105, CVE-2017-10053, CVE-2017-10108, CVE-2017-10109, CVE-2017-10135, CVE-2017-10243

Affected product(s) and affected version(s):

IBM SmartCloud Entry Appliance 2.3.0 through 2.3.0.4 fix pack 11,
IBM SmartCloud Entry Appliance 2.4.0 through 2.4.0.4 fix pack 11,
IBM SmartCloud Entry Appliance 3.1.0 through 3.1.0.4 fix pack 26,
IBM SmartCloud Entry Appliance 3.2.0 through 3.2.0.4 fix pack 26

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1025910
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128937
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128885
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128831
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128876
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128879
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128918
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128840
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128837
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128852
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128858
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128862
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128877
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128863
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128849
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128851
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128868
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128871
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128872
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/126873
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128934
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128843
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128866
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128822
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128869
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128870
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128894
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/128980

The post IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SmartCloud Entry appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2FHUoDR