IBM Security Bulletin: IBM Notes vulnerable to Fedora Project HarfBuzz information disclosure (CVE-2016-2052)

IBM Expeditor is consuming XULRunner 1.0.6 version. A fix was provided to avoid denial of service or an unspecified impact.

CVE(s): CVE-2016-2052

Affected product(s) and affected version(s):

IBM Notes 9.0.1 FP6 and earlier release.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2cgSIoQ
X-Force Database: http://ift.tt/2cABOPn

from IBM Product Security Incident Response Team http://ift.tt/2cgTK4e