Security Bulletin: IBM Waston Machine Learning Acclerator is affected by OpenSSL vulnerabilities

Summary

There are vulnerabilities in OpenSSL used by IBM Watson Machine Learning Accelerator. IBM Watson Machine Learning Accelerator has addressed the applicable CVEs: CVE-2021-23839, CVE-2021-23840, CVE-2021-23841.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Remediation/Fixes

Product(s)

|

Version(s)

|

APAR

|

Remediation/First Fix

—|—|—|—

IBM Watson Machine Learning Accelerator

|

1.2.1

1.2.2

|

None

|

Upgrade Watson Machine Learning Accelerator to the latest version 1.2.3 by following IBM docs <https://www.ibm.com/docs/en/wmla&gt;

If the current version is 1.2.2, upgrade it to the version 1.2.3.

If the current version is 1.2.1, upgrade it to the version 1.2.2 first, then upgrade from the version 1.2.2 to the version 1.2.3.

After upgrade to wmla1.2.3, apply fix patch dli-1.2.3-build600479-wmla

IBM Watson Machine Learning Accelerator

|

1.2.3

|

None

|

Apply fix patch dli-1.2.3-build600479-wmla

Workarounds and Mitigations

None