IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM® Db2®.

Nov 7, 2018 8:02 am EST

Categorized: High Severity

Share this post:

There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6.0.16.65 and earlier, 6.1.8.65 and earlier, 7.0.10.25 and earlier, 7.1.4.25 and earlier, 8.0.5.17 and earlier used by IBM® Db2®. These issues were disclosed as part of the IBM Java SDK updates in August 2018.

CVE(s): CVE-2018-1656, CVE-2018-2973, CVE-2018-12539

Affected product(s) and affected version(s):

All fix pack levels of IBM Db2 V9.7, V10.1, V10.5, and V11.1 editions on all platforms are affected.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10725491
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144882
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/146835
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/148389

from IBM Product Security Incident Response Team https://ift.tt/2JLU75T