Security Bulletin: IBM Waston Machine Learning Acclerator is affected by a Python vulnerability

Summary

There is a vulnerability in Python used by IBM Watson Machine Learning Accelerator. IBM Watson Machine Learning Accelerator havs addressed the applicable CVE, CVE-2021-3177 by upgrade python to version 3.7.10

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

1.2.3

2.2.1

Remediation/Fixes

Product(s) |

Version(s)

|

APAR

|

Remediation/First Fix

—|—|—|—

IBM Watson Machine Learning Accelerator

|

1.2.3

|

None

|

follow doc to update python

<https://github.com/IBM/wmla-assets/tree/master/installation/wmla-1.2.3&gt;

IBM Watson Machine Learning Accelerator

|

2.2.1

|

None

|

follow doc to install patch1 and patch2

<https://www.ibm.com/support/pages/node/6412293&gt;

Workarounds and Mitigations

None