IBM Security Bulletin: Vulnerabilities in Ruby affect PowerKVM

PowerKVM is affected by vulnerabilities in Ruby . IBM has now addressed these vulnerabilities.

CVE(s): CVE-2017-17790, CVE-2017-17405, CVE-2017-14064, CVE-2017-14033, CVE-2017-10784, CVE-2017-0903, CVE-2017-0902, CVE-2017-0901, CVE-2017-0900, CVE-2017-0899, CVE-2017-0898

Affected product(s) and affected version(s):

PowerKVM v3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=isg3T1027286
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136550
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/136460
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131304
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/132046
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/132045
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/133521
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131229
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131232
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131231
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/131230
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/132044

The post IBM Security Bulletin: Vulnerabilities in Ruby affect PowerKVM appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2r7Y2Cc