Medium Severity

Security Bulletin: Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7

Share this post:

Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7. CVE-2019-9948 and CVE-2019-9947 are fixed in RHEL7 as part of Errata RHSA-2019:2030 (https://access.redhat.com/errata/RHSA-2019:2030). This update is included in Resilient 34.1.53, released on September 17, 2019, and subsequent versions.

Affected product(s) and affected version(s):

Affected Product(s) Version(s)
IBM Resilient v33.x
IBM Resilient v34.0

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6173469

More stories

Security Bulletin: There is an information disclosure vulnerability in Liberty for Java (CVE-2020-4329)

Jun 5, 2020 8:00 pm EDT | Medium Severity

There is an information disclosure in WebSphere Application Server Liberty. ...read more


Security Bulletin: Potential spoofing attack in Liberty for Java (CVE-2020-4421)

Jun 5, 2020 8:00 pm EDT | Medium Severity

IBM WebSphere Application Server Liberty using openidConnectServer feature could allow spoofing identity by an authenticated user. This has been addressed. ...read more


Security Bulletin: CVE-2019-2949 may affect IBM® SDK, Java™ Technology Edition used in Liberty for Java

Jun 5, 2020 8:00 pm EDT | Medium Severity

CVE-2019-2949 was disclosed in the Oracle October 2019 Critical Patch Update ...read more