IBM Security Bulletin: Open Source Apache Xerces-C XML parser vulnerabilities affect IBM Integration Bus and WebSphere Message Broker (CVE-2016-4463, CVE-2016-0729)

IBM Integration Bus and WebSphere Message Broker are affected by Open Source Apache Xerces-C XML parser vulnerabilities.

CVE(s): CVE-2016-0729, CVE-2016-4463

Affected product(s) and affected version(s):

IBM Integration Bus V10

WebSphere Message Broker V8

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2gMJ5kC
X-Force Database: http://ift.tt/297OoIU
X-Force Database: http://ift.tt/2b5BVXc



from IBM Product Security Incident Response Team http://ift.tt/2hcua07