Security Bulletin: WML CE: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

Jul 20, 2020 8:00 pm EDT

Categorized: Critical Severity

Share this post:

Tensorflow uses SQLite as its embedded SQL database engine. SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c so it has been updated to 3.32.3 in WML CE.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Watson Machine Learning Community Edition	1.6.2
IBM Watson Machine Learning Community Edition	1.7.0

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6250935

from IBM Product Security Incident Response Team https://ift.tt/3hi96nQ