IBM Security Bulletin: Vulnerability in openssl affects IBM System Networking Switch products (CVE-2016-2108)
IBM System Networking Switch products have addressed the following vulnerability in openssl.
CVE(s): CVE-2016-2108
Affected product(s) and affected version(s):
| Product | Affected Version |
|---|---|
| IBM Flex System Fabric EN4093R 10Gb Scalable Switch | 7.8.14.0 |
| IBM Flex System Fabric CN4093 10Gb Converged Scalable Switch | 7.8.14.0 |
| IBM Flex System Fabric SI4093 System Interconnect Module | 7.8.14.0 |
| IBM Flex System EN2092 1Gb Ethernet Scalable Switch | 7.8.14.0 |
| IBM Virtual Fabric 10Gb Switch Module | 7.8.10.0 |
| IBM 1/10Gb Uplink Ethernet Switch Module | 7.4.14.0 |
| IBM RackSwitch G8264CS | 7.8.14.0 |
| IBM RackSwitch G8052 | 7.9.17.0 |
| IBM RackSwitch G8052 | 7.11.7.0 |
| IBM RackSwitch G8124/G8124-E | 7.9.17.0 |
| IBM RackSwitch G8124/G8124-E | 7.11.7.0 |
| IBM RackSwitch G8264 | 7.9.17.0 |
| IBM RackSwitch G8264 | 7.11.7.0 |
| IBM RackSwitch G8264T | 7.9.17.0 |
| IBM RackSwitch G8316 | 7.9.17.0 |
| IBM RackSwitch G8332 | 7.7.23.0 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2cYtQVe
X-Force Database: http://ift.tt/2a9qwnB
from IBM Product Security Incident Response Team http://ift.tt/2cYtZrR