IBM Security Bulletin: IBM SmartCloud Provisioning security vulnerability has been identified in nginx (CVE-2016-4450)

IBM SmartCloud Provisioning and SmartCloud Provisioning for Software Virtual Appliaance ships with nginx. A denial of service vulnerability has been identified in nginx (CVE-2016-4450).

CVE(s): CVE-2016-4450

Affected product(s) and affected version(s):

All releases of IBM SmartCloud Provisioning 2.1 and IBM SmartCloud Provisioning V2.1 for IBM Software Virtual Appliance.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/29OGQbd
X-Force Database: http://ift.tt/29OEayj



from IBM Product Security Incident Response Team http://ift.tt/29OHkhz