Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-11214, CVE-2018-11213, CVE-2018-11212)

IBM has announced a release for IBM Security Identity Governance and Intelligence (IGI) in response to security vulnerability. The libjpeg-turbo packages contain a library of functions for manipulating JPEG images. They also contain simple client programs for accessing the libjpeg functions. These packages provide the same functionality and API as libjpeg but with better performance. Issues were discovered in libjpeg 9a library.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Security Identity Governance and Intelligence	5.2.4
IBM Security Identity Governance and Intelligence	5.2.5

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/1284784

The post Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2018-11214, CVE-2018-11213, CVE-2018-11212) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/3aVDyl9