High Severity
Security Bulletin: A security vulnerability in Node.js affects IBM Voice Gateway
Nov 30, 2020 7:00 pm EST
Categorized: High Severity
Share this post:
This vulnerability could potentially affect the STT and TTS adapter microservices if they are used over the public internet which is not a recommended configuration for production. Consider updating if this scenario is relevant.
Affected product(s) and affected version(s):
| Affected Product(s) | Version(s) |
| Voice Gateway | 1.0.6 |
| Voice Gateway | 1.0.2.4 |
| Voice Gateway | 1.0.4 |
| Voice Gateway | 1.0.2 |
| Voice Gateway | 1.0.5 |
| Voice Gateway | 1.0.3 |
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www.ibm.com/support/pages/node/6373668
Security Bulletin: Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data – GNU glibc (CVE-2020-1751)
Jan 13, 2021 7:02 pm EST | High Severity
Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc (CVE-2020-1751) ...read more
Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2015-9381, CVE-2015-9382)
Jan 13, 2021 7:02 pm EST | High Severity
IBM has announced a release for IBM Security Identity Governance and Intelligence (IGI) in response to security vulnerabilities. The vulnerabilities concerns Freetype: a remote attacker could obtain sensitive information or cause a denial of service. ...read more
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities
Jan 13, 2021 7:02 pm EST | High Severity
IBM Security Privileged Identity Manager has addressed an issue for NTP as follows. ...read more