Vulnerability Bulletins

IBM Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM SmartCloud Entry (CVE-2015-0486 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-0458 CVE-2015-0480 CVE-2015-0488 CVE-2

   
Affected software IBM
 
There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 6 Service Refresh 16 and 7 Service Refresh 7 that are used by IBM SmartCloud Entry. These issues were disclosed as part of the IBM Java SDK updates in April 2015. This bulletin also addresses FREAK: Factoring Attack on RSA-EXPORT keys" SSL/TLS vulnerability and RC4 Bar Mitzvah Attack for SSL/TLS vulnerability. CVE(s): CVE-2015-0486, CVE-2015-0491, CVE-2015-0459, CVE-2015-0469, CVE-2015-0458,

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_ibm_java_runtime_affect_ibm_smartcloud_entry_cve_2015_0486_cve_2015_0491_cve_2015_0459_cve_2015_0469_cve_2015_0458_cve_2015_0480_cve_2015_0488_cve