IBM Security Bulletin: Vulnerability in IBM SDK, Java Technology Edition Quarterly CPU

There’s a multiple vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU used by IBM Streams. IBM Streams has addressed the applicable CVEs.

CVE(s): CVE-2016-0705, CVE-2018-1517, CVE-2018-1656, CVE-2018-2973, CVE-2018-2952, CVE-2018-2940, CVE-2018-12539

Affected product(s) and affected version(s):

Affected InfoSphere Streams	Affected Versions
InfoSphere Streams	4.0.1.6 and earlier
InfoSphere Streams	3.2.1.6 and earlier
IBM Streams	4.1.1.6 and earlier
IBM Streams	4.2.1.4 and earlier
IBM Streams	4.3.0.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10737247
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/111140
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/141681
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144882
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146815
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146803
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148389

The post IBM Security Bulletin: Vulnerability in IBM SDK, Java Technology Edition Quarterly CPU appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2Od19mu