|
Problem IT17646
|
Status: Closed |
SECURITY: VULNERABILITY IN GSKIT AFFECTS IBM DB2 (CVE-2016-2183) |
| product: |
DB2 FOR LUW / DB2FORLUW / A50 - DB2 |
| Problem description: |
GSKit is an IBM component that is used by IBM DB2 LUW. The
version of GSKit that is shipped with DB2 LUW contains the
"Sweet32 Birthday Attack" vulnerability.
See security bulletin for details:
http://www-01.ibm.com/support/docview.wss?uid=swg21994375 |
| Problem Summary: |
****************************************************************
* USERS AFFECTED: *
* ALL *
****************************************************************
* PROBLEM DESCRIPTION: *
* See Error Description *
****************************************************************
* RECOMMENDATION: *
* Upgrade to Db2 10.5 Fix Pack 9 or higher *
**************************************************************** |
| Local Fix: |
See security bulletin for details:
http://www-01.ibm.com/support/docview.wss?uid=swg21994375 |
| Solution |
First fixed in Db2 10.5 Fix Pack 9 |
| Workaround |
not known / see Local fix |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 24.10.2016
29.09.2017
29.09.2017 |
| Problem solved at the following versions (IBM BugInfos) |
9.0.
|
| Problem solved according to the fixlist(s) of the following version(s) |
