IBM Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters (CVE-2017-3736)

A vulnerability was found in the OpenSSL release used by the Windows and z/OS Security Identity Adapters. These adapters have been upgraded to a more current OpenSSL release that corrects CVE-2017-3736, “bn_sqrx8x_internal carry bug on x86_64” vulnerability.

CVE(s):

Affected product(s) and affected version(s):

IBM Security Identity Manager v6.0 Adapters for Windows and z/OS platforms

IBM Security Identity Adapters v7.x for Windows and z/OS platforms

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22014629
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397

The post IBM Security Bulletin: Vulnerability found in OpenSSL release used by Windows and z/OS Security Identity Adapters (CVE-2017-3736) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2HVUWak