Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Spectrum Conductor and IBM Spectrum Conductor with Spark

There is an unspecified vulnerability (CVE-2019-2949) in IBM® Runtime Environment Java Version 8 used by IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3.0, and IBM Spectrum Conductor with Spark 2.2.1. IBM Spectrum Conductor 2.4.1, IBM Spectrum Conductor 2.4.0, IBM Spectrum Conductor 2.3, and IBM Spectrum Conductor with Spark 2.2.1 have addressed the applicable CVE.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Spectrum Conductor	2.2.1
IBM Spectrum Conductor	2.4
IBM Spectrum Conductor	2.4.1
IBM Spectrum Conductor	2.3

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6217803

The post Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Spectrum Conductor and IBM Spectrum Conductor with Spark appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2MdIkj6