Vulnerability Bulletins |
IBM Security Bulletin: Multiple vulnerabilities in OpenSSL affect PowerKVM |
|
| Affected software | IBM |
|
OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by PowerKVM. PowerKVM has addressed the applicable CVEs including the “DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. CVE(s): CVE-2016-0800, CVE-2016-0705, CVE-2016-0798, CVE-2016-0797, CVE-2016-0799, CVE-2016-0702, CVE-2016-0703, CVE-2016-0704 and CVE-2015-3197Affected product(s) and affected version(s):PowerKVM 2.1 and PowerKVM 3.1 Refer to the following More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_multiple_vulnerabilities_in_openssl_affect_powerkvm?lang=en_us |
|