IBM Security Bulletin: Security vulnerability in OpenSSL (CVE-2017-3736)

A potential vulnerability has been reported by the OpenSSL project. IBM DataPower Gateways has addressed the applicable CVE.

CVE(s): CVE-2017-3736

Affected product(s) and affected version(s):

7.2.0.0-7.2.0.19, 7.5.0.0-7.5.0.14, 7.5.1.0-7.5.1.13, 7.5.2.0-7.5.2.13, 7.6.0.0-7.6.0.6

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg22016334
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/134397

The post IBM Security Bulletin: Security vulnerability in OpenSSL (CVE-2017-3736) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2sxpI3d