Security Bulletin: Multiple vulnerabilities in IBM Java JRE affect IBM InfoSphere Global Name Management (CVE-2021-35578, CVE-2021-35550, CVE-2021-35603)

Summary

There are multiple vulnerabilities in the Java used in IBM InfoSphere Global Name Management (GNM).

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

Per the original bulletin for CVE-2021-35578 (<https://www.ibm.com/support/pages/node/6522860&gt;), apply IBM Java 8.0.7.0 or later.
Per the original bulletins for CVE-2021-35550 (<https://www.ibm.com/support/pages/node/6559262&gt;) and CVE-2021-35603 (<https://www.ibm.com/support/pages/node/6559266&gt;), apply IBM Java 8.0.7.5 or later.

IBM recommends installing the latest version 8 Service Refresh 7 release. All three issues can be addressed by updating GNM 6 using the files and instructions in GNM 6 interim fix 13, available at IBM fix central, which updates the IBM Java in GNM to version 8.0.7.5.

Workarounds and Mitigations

None