IBM Family (IBM SDK, Java Technology Edition) Security Update Advisory
Overview
IBM has released an update to address a vulnerability. users of affected versions are advised to update to the latest version.
Affected Products
CVE-2023-30441
- IBM SDK, Java Technology Edition Versions: 8.0.7.0 (inclusive) to 8.0.7.11 (inclusive)
- IBM Spectrum Virtualize Versions: 8.2, 8.3, 8.4, 8.5
Resolved Vulnerabilities
Vulnerability in IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE components that could allow a combination of flaws and configurations to expose sensitive information (CVE-2023-30441)
Vulnerability Patches
Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2023-30441
- IBM SDK, Java Technology Edition Version: 8.0.7.15
- IBM Spectrum Virtualize Versions: 8.5.4.0, 8.5.2.3, 8.5.0.7, 8.4.0.10, 8.3.1.9, 8.2.1.17
Referenced Sites
[1] Security Bulletin: CVE-2023-30441 affects IBM® SDK, Java™ Technology Edition
https://www.ibm.com/support/pages/node/6985011
[2] Security Bulletin: A vulnerability in IBM Java affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products