Multiple vulnerabilities in IBM Java SDK affect AIX

IBM SECURITY ADVISORY First Issued: Tue Nov 3 15:29:58 CST 2020 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/javajuly2020advisory.asc https://aix.software.ibm.com/aix/efixes/security/javajuly2020advisory.asc...

RLSA-2020:4629 Moderate: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 libvpx: Out of bounds read in vp8nor...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU vulnerability

Summary Vulnerability exposure CVE-2020-14577 from Oracle Jul 2020 QuarterlyCPU in IBM® SDK Java™ may affect Java SDK used in IBM Operations Analytics Predictive Insights 1.3.3, 1.3.3.5, 1.3.6. IBM Operations Analytics Predictive Insights has addressed the applicable CVE. Vulnerability Details...

Regression in JWT Signature Validation

Overview Versions after and including 2.3.0 are improperly validating the JWT token signature when using the JWTValidator.verify method. Improper validation of the JWT token signature when not using the default Authorization Code Flow can allow an attacker to bypass authentication and...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics Local 2.0.9.3 and IBM Planning Analytics Workspace Release 58. There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by IBM Planning Analytics and IBM Planning...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® Java SDK that affect IBM Security Directory Suite - October 2019 CPU

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Security Directory Suite. The issues were disclosed as part of the IBM Java SDK updates in October 2019 and it includes the vulnerabilities details. Vulnerability Details CVEID: CVE-2019-2989...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® Java SDK that affect IBM Security Directory Suite - January 2020 CPU

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Security Directory Suite. The issues were disclosed as part of the IBM Java SDK updates in January 2020 and it includes the vulnerabilities details. Vulnerability Details CVEID: CVE-2020-2604...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Vulnerability in IBM Java SDK affects Rational Developer for System z (CVE-2018-3180)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition that is used by Rational Developer for System z. The issue was disclosed as part of the IBM Java SDK updates in October 2018. Vulnerability Details | Subscribe to My Notifications to be notified of important product support...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects Rational Developer for System z (CVE-2018-2783 and CVE-2018-2814)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by Rational Developer for System z. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details | Subscribe to My Notifications to be notified of important product...

Security Bulletin: There is a vulnerability in IBM Java SDK that affects Rational Developer for System z (CVE-2014-3566)

Summary There is a vulnerability in IBM SDK Java Technology Edition, Versions 6 and 7, which are used by Rational Developer for System z. This includes the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. This was disclosed as part of the IBM Java SDK updat...

Security Bulletin: Rational Developer for System z is affected due to vulnerabilities in IBM Java IBM SDK, Java Technology Edition - April 2014 (CVE-2014-0453)

Summary IBM Java IBM SDK, Java Technology Edition SE issues disclosed in the April 2014 Critical Patch Update, plus 1 additional vulnerability affects Rational Developer for System z. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like thi...

Security Bulletin: Vulnerability in IBM Java SDK affects Rational Developer for System z (CVE-2015-7575)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition that is used by Rational Developer for System z. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details | Subscribe to My Notifications to b...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects Rational Developer for System z (CVE-2016-0363 and CVE-2016-0376)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by Rational Developer for System z. These issues were disclosed as part of the IBM Java SDK updates in April 2016. Vulnerability Details | Subscribe to My Notifications to be notified of important product...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for System z (CVE-2015-0138, CVE-2015-0410, CVE-2014-6593)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 6 and 7 that is used by Rational Developer for System z. These issues were disclosed as part of the IBM Java SDK updates in January 2015. This bulletin also addresses the “FREAK: Factoring Attack on RSA-EXPO...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for System z CVE-2015-0138

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, that is used by Rational Developer for System z. These issues were disclosed as part of the IBM Java SDK updates in January 2015. This bulletin also addresses the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL...

Security Bulletin: Security vulnerability in Rational Developer for System z (CVE-2013-0485)

Summary An unspecified vulnerability in IBM Rational Developer for System z could allow remote attackers to execute arbitrary commands via unknown vectors. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...