IBM Security Bulletin: Multiple vulnerabilities in XMLsoft Libxml2 and OpenSSL affect IBM Netezza Analytics

XMLsoft Libxml2 and OpenSSL are consumed by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs.

CVE(s): CVE-2017-16932, CVE-2017-16931, CVE-2016-1840, CVE-2016-1839, CVE-2016-1838, CVE-2016-1837, CVE-2016-1836, CVE-2016-1835, CVE-2016-1834, CVE-2016-1833, CVE-2016-1762, CVE-2017-3737

Affected product(s) and affected version(s):

IBM Netezza Analytics 1.2.4 – 3.3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22013398
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135489
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/135488
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113334
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113333
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113332
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113331
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113330
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113329
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113328
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113327
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111628
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136077

The post IBM Security Bulletin: Multiple vulnerabilities in XMLsoft Libxml2 and OpenSSL affect IBM Netezza Analytics appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2FGWhlf