IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM Service Delivery Manager

OpenSSL vulnerabilities were disclosed on September 22, 2016 by the OpenSSL Project. OpenSSL is installed on the operating system shipped via IBM Service Delivery Manager. IBM Service Delivery Manager has addressed the applicable CVEs.

CVE(s): CVE-2016-6303, CVE-2016-2180, CVE-2016-6305, CVE-2016-2178, CVE-2016-6308, CVE-2016-2181

Affected product(s) and affected version(s):

IBM Service Delivery Manager 7.2.1
IBM Service Delivery Manager 7.2.2
IBM Service Delivery Manager 7.2.3
IBM Service Delivery Manager 7.2.4

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2ijxgQv
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dmWOvf
X-Force Database: http://ift.tt/2dR3XX1
X-Force Database: http://ift.tt/2asKHex
X-Force Database: http://ift.tt/2dmYa8Y
X-Force Database: http://ift.tt/2dmXLUk

from IBM Product Security Incident Response Team http://ift.tt/2ijx5ol