Home » Oreps » TensorFlow » All Releases » v2.7.1 Release

tensorflow/tensorflow

An Open Source Machine Learning Framework for Everyone

Watch

Basic Details Issues Addressed Top Contributors Directory Browser Release Notes

TensorFlow v2.7.1

TensorFlow: v2.7.1 Release

Release date:

January 30, 2022

Previous version:

v2.7.0 (released November 1, 2021)

Magnitude:

1,958 Diff Delta

Contributors:

13 total committers

Data confidence:

Commits:

116

110 Features Released with v2.7.1

Browse Other Releases

Latest Pending Unreleased 😎

v2.8.0-rc1 Released January 30, 2022

25,247 Δ

v2.8.0-rc0 Released September 1, 2022

4,536 Δ

v2.7.4 Released November 29, 2022

108,855 Δ

v2.7.3 Released May 20, 2022

20 Δ

v2.7.2 Released May 12, 2022

464 Δ

v2.7.1 Released January 30, 2022

1,958 Δ

v2.7.0 Released November 1, 2021

555 Δ

v2.7.0-rc1 Released October 27, 2021

127 Δ

v2.7.0-rc0 Released May 22, 2022

3,661 Δ

v2.6.5 Released May 22, 2022

17 Δ

Top Contributors in v2.7.1

ishark

mihaimaruseac

karimnosseir

duncanriach

k-w-w

bhupendradubey-cmd

tensorflow-jenkins

nouiz

terryheo

aaudiber

Directory Browser for v2.7.1

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Release 2.7.1

This releases introduces several vulnerability fixes:

Fixes a floating point division by 0 when executing convolution operators (CVE-2022-21725)
Fixes a heap OOB read in shape inference for ReverseSequence (CVE-2022-21728)
Fixes a heap OOB access in Dequantize (CVE-2022-21726)
Fixes an integer overflow in shape inference for Dequantize (CVE-2022-21727)
Fixes a heap OOB access in FractionalAvgPoolGrad (CVE-2022-21730)
Fixes an overflow and divide by zero in UnravelIndex (CVE-2022-21729)
Fixes a type confusion in shape inference for ConcatV2 (CVE-2022-21731)
Fixes an OOM in ThreadPoolHandle (CVE-2022-21732)
Fixes an OOM due to integer overflow in StringNGrams (CVE-2022-21733)
Fixes more issues caused by incomplete validation in boosted trees code (CVE-2021-41208)
Fixes an integer overflows in most sparse component-wise ops (CVE-2022-23567)
Fixes an integer overflows in AddManySparseToTensorsMap (CVE-2022-23568)
Fixes a number of CHECK-failures in MapStage (CVE-2022-21734)
Fixes a division by zero in FractionalMaxPool (CVE-2022-21735)
Fixes a number of CHECK-fails when building invalid/overflowing tensor shapes (CVE-2022-23569)
Fixes an undefined behavior in SparseTensorSliceDataset (CVE-2022-21736)
Fixes an assertion failure based denial of service via faulty bin count operations (CVE-2022-21737)
Fixes a reference binding to null pointer in QuantizedMaxPool (CVE-2022-21739)
Fixes an integer overflow leading to crash in SparseCountSparseOutput (CVE-2022-21738)
Fixes a heap overflow in SparseCountSparseOutput (CVE-2022-21740)
Fixes an FPE in BiasAndClamp in TFLite (CVE-2022-23557)
Fixes an FPE in depthwise convolutions in TFLite (CVE-2022-21741)
Fixes an integer overflow in TFLite array creation (CVE-2022-23558)
Fixes an integer overflow in TFLite (CVE-2022-23559)
Fixes a dangerous OOB write in TFLite (CVE-2022-23561)
Fixes a vulnerability leading to read and write outside of bounds in TFLite (CVE-2022-23560)
Fixes a set of vulnerabilities caused by using insecure temporary files (CVE-2022-23563)
Fixes an integer overflow in Range resulting in undefined behavior and OOM (CVE-2022-23562)
Fixes a vulnerability where missing validation causes tf.sparse.split to crash when axis is a tuple (CVE-2021-41206)
Fixes a CHECK-fail when decoding resource handles from proto (CVE-2022-23564)
Fixes a CHECK-fail with repeated AttrDef (CVE-2022-23565)
Fixes a heap OOB write in Grappler (CVE-2022-23566)
Fixes a CHECK-fail when decoding invalid tensors from proto (CVE-2022-23571)
Fixes a null-dereference when specializing tensor type (CVE-2022-23570)
Fixes a crash when type cannot be specialized (CVE-2022-23572)
Fixes a heap OOB read/write in SpecializeType (CVE-2022-23574)
Fixes an unitialized variable access in AssignOp (CVE-2022-23573)
Fixes an integer overflow in OpLevelCostEstimator::CalculateTensorSize (CVE-2022-23575)
Fixes an integer overflow in OpLevelCostEstimator::CalculateOutputSize (CVE-2022-23576)
Fixes a null dereference in GetInitOp (CVE-2022-23577)
Fixes a memory leak when a graph node is invalid (CVE-2022-23578)
Fixes an abort caused by allocating a vector that is too large (CVE-2022-23580)
Fixes multiple CHECK-failures during Grappler's IsSimplifiableReshape (CVE-2022-23581)
Fixes multiple CHECK-failures during Grappler's SafeToRemoveIdentity (CVE-2022-23579)
Fixes multiple CHECK-failures in TensorByteSize (CVE-2022-23582)
Fixes multiple CHECK-failures in binary ops due to type confusion (CVE-2022-23583)
Fixes a use after free in DecodePng kernel (CVE-2022-23584)
Fixes a memory leak in decoding PNG images (CVE-2022-23585)
Fixes multiple CHECK-fails in function.cc (CVE-2022-23586)
Fixes multiple CHECK-fails due to attempting to build a reference tensor (CVE-2022-23588)
Fixes an integer overflow in Grappler cost estimation of crop and resize operation (CVE-2022-23587)
Fixes a null pointer dereference in Grappler's IsConstant (CVE-2022-23589)
Fixes a CHECK failure in constant folding (CVE-2021-41197)
Fixes a stack overflow due to self-recursive function in GraphDef (CVE-2022-23591)
Fixes a crash due to erroneous StatusOr (CVE-2022-23590)
Fixes multiple crashes and heap OOB accesses in TFG dialect (MLIR) (CVE-2022-23594)
Fixes a null pointer dereference in BuildXlaCompilationCache (XLA) (CVE-2022-23595)
Updates icu to 69.1 to handle CVE-2020-10531