Security Bulletin: OpenSSL vulnerabilites (CVE-2019-1552) impacting IBM Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop 3.9.1 and earlier

OpenSSL vulnerabilites impacting IBM Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop 3.9.1, Aspera Connect 3.7.4 and earlier (CVE-2019-1552). The vulnerabilities are fixed in IBM Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop 3.9.6, and Aspera Connect 3.9.8.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Aspera Desktop Client	3.9.1 and earlier
IBM Aspera High-Speed Transfer Server	3.9.1 and earlier
IBM Aspera High-Speed Transfer Endpoint	3.9.1 and earlier
IBM Aspera Connect	3.7.4 and earlier

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/2027745

The post Security Bulletin: OpenSSL vulnerabilites (CVE-2019-1552) impacting IBM Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop 3.9.1 and earlier appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2UHPykM