Security Bulletin: A security vulnerability has been identified in IBM Java Runtime shipped with WebSphere Partner Gateway Advanced/Enterprise editions (CVE-2016-5597)

Summary

IBM Java Runtime is shipped as a component of WebSphere Partner Gateway Advanced/Enterprise editions. Information about a vulnerability in IBM Java Runtime has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for vulnerability details and information about fixes.

Affected Products and Versions

WebSphere Partner Gateway Advanced/Enterprise Edition Versions 6.2.0.0, 6.2.0.1, 6.2.0.2, 6.2.0.3, 6.2.0.4, 6.2.0.5, 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.1.3, 6.2.1.4

Remediation/Fixes

The recommended solution is to apply the iFix as soon as practical. Please see below for information about the fixes available.

Workarounds and Mitigations

Apply WPG 6.2.1.5