Security Bulletin: Security vulnerabilities have been identified in IBM® DB2® shipped with IBM System Networking Element Manager (CVE-2013-6747, CVE-2014-0963)

Summary

IBM DB2 is shipped as a component of IBM System Networking Element Manager. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin IBM® DB2® is impacted by multiple TLS/SSL security vulnerabilities (CVE-2013-6747, CVE-2014-0963) for vulnerability details

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM System Networking Element Manager, versions 6.1, 6.1.1, and 6.1.2| IBM System Networking Element Manager is packaged as a virtual machine. It uses the Redhat Enterprise Linux 5.0 for x86, 32-bit operating system and uses IBM DB2 Workgroup Server Edition 9.7. Please use the fix pack for: Linux 32-bit, x86-32 on AMD and Intel®