IBM Security Bulletin: Multiple Vulnerabilities in NTP and OpenSSL affect IBM Netezza Firmware Diagnostics Tools

NTP and OpenSSL is used by IBM Netezza Firmware Diagnostics Tools. OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. IBM Netezza Firmware Diagnostics Tools has addressed the applicable CVEs.

CVE(s): CVE-2015-8138, CVE-2016-2108, CVE-2016-2177, CVE-2016-2178

Affected product(s) and affected version(s):

IBM Netezza Firmware Diagnostics Tools 4.3.1.2 and earlier

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hcnmzo
X-Force Database: http://ift.tt/1rd26hG
X-Force Database: http://ift.tt/1VjTr9i
X-Force Database: http://ift.tt/2aPXjQq
X-Force Database: http://ift.tt/2asKHex

from IBM Product Security Incident Response Team http://ift.tt/2gMKrfl