IBM Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities

IBM Event Streams has addressed the following vulnerabilities in the shipped cURL libraries.

CVE(s): CVE-2018-16890, CVE-2019-3822, CVE-2019-3823

Affected product(s) and affected version(s):
IBM Event Streams 2018.3.0 IBM Event Streams 2018.3.1

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10876554
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/156649
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/156651
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/156650

The post IBM Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2V76Bdm