Vulnerability Bulletins

BM Security Bulletin: Vulnerability in IBM Java Runtime affects IBM MQ Light (CVE-2015-7575)

   
Affected software IBM
 
There is a vulnerability in IBM® Runtime Environment Java™ Technology Edition, Version 7R1 Service Refresh 3 Fix Pack 1 and earlier releases that is used by IBM MQ Light. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016. CVE(s): CVE-2015-7575 Affected product(s) and affected version(s): The vulnerability affects users of IBM MQ Light V1.0, V1.0.1 and V1.0.2 on all platforms. Refer to the following

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/bm_security_bulletin_vulnerability_in_ibm_java_runtime_affects_ibm_mq_light_cve_2015_7575?lang=en_us