IBM Security Bulletin: Multiple Vulnerabilities in OpenSSL affect IBM MQ Appliance
OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM MQ Appliance. IBM MQ Appliance has addressed the applicable CVEs.
CVE(s): CVE-2016-2108, CVE-2016-2107, CVE-2016-2105, CVE-2016-2106, CVE-2016-2109
Affected product(s) and affected version(s):
IBM MQ Appliance M2000
IBM MQ Appliance M2001
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2b1F3oa
X-Force Database: http://ift.tt/1VjTr9i
X-Force Database: http://ift.tt/1NwOQz5
X-Force Database: http://ift.tt/1NwOPLs
X-Force Database: http://ift.tt/25myFMu
X-Force Database: http://ift.tt/1Z0wO8Z
from IBM Product Security Incident Response Team http://ift.tt/2b1F0IP