IBM Security Bulletin: Vulnerability in OpenSSL affects MegaRAID Storage Manager (CVE-2016-8610)

MegaRAID Storage Manager has addressed the following vulnerability in OpenSSL, referred to as “SSL Death Alert.” Vulnerability Details:

CVE(s): CVE-2016-8610

Affected product(s) and affected version(s):

Product	Affected Version
MegaRAID Storage Manager	15.11

Remediation/Fixes:

Firmware fix versions are available on Fix Central:
http://ift.tt/1qeg5iT.

Product	Fix Version
MegaRAID Storage Manager ibm_utl_msm_16.05.04.01_linux_32-64 ibm_utl_msm_16.05.04.01_windows_32-64	16.05.04.01

Workaround(s) & Mitigation(s):

None

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2rIN08i
X-Force Database: http://ift.tt/2hNr07D

The post IBM Security Bulletin: Vulnerability in OpenSSL affects MegaRAID Storage Manager (CVE-2016-8610) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2sijXWe