IBM Security Bulletin: OpenSSL vulnerabilities affect IBM Rational Team Concert (CVE-2016-2107, CVE-2016-2176)

OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by Rational BuildForge Agent shipped with IBM Rational Team Concert. Rational BuildForge has addressed the applicable CVEs.

CVE(s): CVE-2016-2107, CVE-2016-2176

Affected product(s) and affected version(s):

Rational Team Concert 4.0 – 4.0.7
Rational Team Concert 5.0 – 5.0.2
Rational Team Concert 6.0 – 6.0.2

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2cg9Rfw
X-Force Database: http://ift.tt/1NwOQz5
X-Force Database: http://ift.tt/25mym4p

from IBM Product Security Incident Response Team http://ift.tt/2c3vOkJ