Security Bulletin: IBM Waston Machine Learning Acclerator is affected by an OpenSSL vulnerability

Summary

There is a vulnerability in OpenSSL used by IBM Watson Machine Learning Accelerator. IBM Watson Machine Learning Accelerator havs addressed the applicable CVE, CVE-2020-1971.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

all

Remediation/Fixes

Product(s)

|

Version(s)

|

APAR

|

Remediation/First Fix

—|—|—|—

IBM Watson Machine Learning Accelerator

|

1.2.1

1.2.2

|

None

|

Upgrade Watson Machine Learning Accelerator to the latest version 1.2.3 by following IBM docs <https://www.ibm.com/docs/en/wmla&gt;

If the current version is 1.2.2, upgrade it to the version 1.2.3.

If the current version is 1.2.1, upgrade it to the version 1.2.2 first, then upgrade from the version 1.2.2 to the version 1.2.3.

Workarounds and Mitigations

None