Home » Oreps » TensorFlow » All Releases » v2.6.4 Release

tensorflow/tensorflow

An Open Source Machine Learning Framework for Everyone

Watch

Basic Details Issues Addressed Top Contributors Directory Browser Release Notes

TensorFlow v2.6.4

TensorFlow: v2.6.4 Release

Release date:

May 18, 2022

Previous version:

v2.6.3 (released January 30, 2022)

Magnitude:

57,176 Diff Delta

Contributors:

206 total committers

Data confidence:

Commits:

2,404

370 Features Released with v2.6.4

Browse Other Releases

Latest Pending Unreleased 😎

v2.7.0 Released November 1, 2021

555 Δ

v2.7.0-rc1 Released October 27, 2021

127 Δ

v2.7.0-rc0 Released May 22, 2022

3,661 Δ

v2.6.5 Released May 22, 2022

17 Δ

v2.6.4 Released May 18, 2022

57,176 Δ

v2.6.3 Released January 30, 2022

1,809 Δ

v2.6.2 Released November 3, 2021

16 Δ

v2.6.1 Released October 31, 2021

880 Δ

v2.6.0 Released August 9, 2021

10,915 Δ

v2.6.0-rc2 Released August 6, 2021

1,541 Δ

Top Contributors in v2.6.4

bhupendradubey-cmd

chr1sj0nes

faizan-m

pineapplejuice233

mihaimaruseac

joefernandez

w-xinyi

k-w-w

yangustc07

shilpakrish2

Directory Browser for v2.6.4

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Release 2.6.4

This releases introduces several vulnerability fixes:

Fixes a code injection in saved_model_cli (CVE-2022-29216)
Fixes a missing validation which causes TensorSummaryV2 to crash (CVE-2022-29193)
Fixes a missing validation which crashes QuantizeAndDequantizeV4Grad (CVE-2022-29192)
Fixes a missing validation which causes denial of service via DeleteSessionTensor (CVE-2022-29194)
Fixes a missing validation which causes denial of service via GetSessionTensor (CVE-2022-29191)
Fixes a missing validation which causes denial of service via StagePeek (CVE-2022-29195)
Fixes a missing validation which causes denial of service via UnsortedSegmentJoin (CVE-2022-29197)
Fixes a missing validation which causes denial of service via LoadAndRemapMatrix (CVE-2022-29199)
Fixes a missing validation which causes denial of service via SparseTensorToCSRSparseMatrix (CVE-2022-29198)
Fixes a missing validation which causes denial of service via LSTMBlockCell (CVE-2022-29200)
Fixes a missing validation which causes denial of service via Conv3DBackpropFilterV2 (CVE-2022-29196)
Fixes a CHECK failure in depthwise ops via overflows (CVE-2021-41197)
Fixes issues arising from undefined behavior stemming from users supplying invalid resource handles (CVE-2022-29207)
Fixes a segfault due to missing support for quantized types (CVE-2022-29205)
Fixes a missing validation which results in undefined behavior in SparseTensorDenseAdd (CVE-2022-29206)
Fixes a missing validation which results in undefined behavior in QuantizedConv2D (CVE-2022-29201)
Fixes an integer overflow in SpaceToBatchND (CVE-2022-29203)
Fixes a segfault and OOB write due to incomplete validation in EditDistance (CVE-2022-29208)
Fixes a missing validation which causes denial of service via Conv3DBackpropFilterV2 (CVE-2022-29204)
Fixes a denial of service in tf.ragged.constant due to lack of validation (CVE-2022-29202)
Fixes a segfault when tf.histogram_fixed_width is called with NaN values (CVE-2022-29211)
Fixes a core dump when loading TFLite models with quantization (CVE-2022-29212)
Fixes crashes stemming from incomplete validation in signal ops (CVE-2022-29213)
Fixes a type confusion leading to CHECK-failure based denial of service (CVE-2022-29209)
Updates curl to 7.83.1 to handle (CVE-2022-22576, (CVE-2022-27774, (CVE-2022-27775, (CVE-2022-27776, (CVE-2022-27778, (CVE-2022-27779, (CVE-2022-27780, (CVE-2022-27781, (CVE-2022-27782 and (CVE-2022-30115
Updates zlib to 1.2.12 after 1.2.11 was pulled due to security issue