IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM InfoSphere Information Server

OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Information Server. IBM InfoSphere Information Server has addressed the applicable CVEs.

CVE(s): CVE-2016-6306, CVE-2016-2183, CVE-2016-6303, CVE-2016-2182, CVE-2016-2177, CVE-2016-2178

Affected product(s) and affected version(s):

The following products, running on all supported platforms, are affected:
IBM InfoSphere Information Server: versions 8.7, 9.1, 11.3 and 11.5
IBM InfoSphere Information Server on Cloud: version 11.5

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2kSGOpW
X-Force Database: http://ift.tt/2dmYpRr
X-Force Database: http://ift.tt/2dR3VyC
X-Force Database: http://ift.tt/2dmXjFz
X-Force Database: http://ift.tt/2dR45pA
X-Force Database: http://ift.tt/2aPXjQq
X-Force Database: http://ift.tt/2asKHex



from IBM Product Security Incident Response Team http://ift.tt/2lnSWfO