IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Streams (CVE-2016-0466, CVE-2016-0448)
There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 Service Refresh 2 Fix Pack 11 and earlier releases, Version 7R1 Service Refresh 3 Fix Pack 31 and earlier releases, and Version 6 Service Refresh 16 Fix Pack 21 and earlier releases. If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to determine whether the complete list of vulnerabilities are applicable to your code. For a complete list of vulnerabilities please refer to the
CVE(s): CVE-2016-0466, CVE-2016-0448
Affected product(s) and affected version(s):
- IBM InfoSphere Streams Version 1.2.1.0
- IBM InfoSphere Streams Version 2.0.0.4 and earlier
- IBM InfoSphere Streams Version 3.0.0.5 and earlier
- IBM InfoSphere Streams Version 3.1.0.7 and earlier
- IBM InfoSphere Streams Version 3.2.1.4 and earlier
- IBM InfoSphere Streams Version 4.0.1.1 and earlier
- IBM Streams Version 4.1.1.0 and earlier
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1ZuDzAc
X-Force Database: http://ift.tt/1N2N3Bz
X-Force Database: http://ift.tt/1WhPjpX
from IBM Product Security Incident Response Team http://ift.tt/1VK7lli