New Vulnerabilities Friday 14 October

New Alerts for IBM, PulseSecure, NetApp, and Linux.       

Oracle Quarterly Patches pre-release is out More info.

IBM 

IBM Watson Discovery for IBM Cloud Pak for Data contains vulnerable versions of Apache Hadoop and Apache Common Confiugrations. CVSSv3 score of 9.8
More info. And here.

IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to buffer overflow in OpenSSL
More info.

An unauthenticated attacker can cause a DoS in Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for Zero-Trust Gateway. Highest CVSSv3 score of 7.5
More info.

NetApp has published 8 new bulletins identifying vulnerabilities in third-party software included in their products. Highest CVSSv3 score of 9.8 No patches yet.
More info.

SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Ubuntu has updated the kernel. More info.