Home » Oreps » TensorFlow » All Releases » v2.7.2 Release

tensorflow/tensorflow

An Open Source Machine Learning Framework for Everyone

Watch

Basic Details Issues Addressed Top Contributors Directory Browser Release Notes

TensorFlow v2.7.2

TensorFlow: v2.7.2 Release

Release date:

May 12, 2022

Previous version:

v2.7.1 (released January 30, 2022)

Magnitude:

464 Diff Delta

Contributors:

9 total committers

Data confidence:

Commits:

38 Features Released with v2.7.2

Browse Other Releases

Latest Pending Unreleased 😎

v2.8.0 Released January 31, 2022

345 Δ

v2.8.0-rc1 Released January 30, 2022

25,247 Δ

v2.8.0-rc0 Released September 1, 2022

4,536 Δ

v2.7.4 Released November 29, 2022

108,890 Δ

v2.7.3 Released May 20, 2022

20 Δ

v2.7.2 Released May 12, 2022

464 Δ

v2.7.1 Released January 30, 2022

1,958 Δ

v2.7.0 Released November 1, 2021

555 Δ

v2.7.0-rc1 Released October 27, 2021

127 Δ

v2.7.0-rc0 Released May 22, 2022

3,661 Δ

Top Contributors in v2.7.2

mihaimaruseac

bhupendradubey-cmd

cantonios

nfelt

sagunb

poulsbo

pranve

tensorflow-jenkins

sngyhan

Directory Browser for v2.7.2

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Release 2.7.2

This releases introduces several vulnerability fixes:

Fixes a code injection in saved_model_cli (CVE-2022-29216)
Fixes a missing validation which causes TensorSummaryV2 to crash (CVE-2022-29193)
Fixes a missing validation which crashes QuantizeAndDequantizeV4Grad (CVE-2022-29192)
Fixes a missing validation which causes denial of service via DeleteSessionTensor (CVE-2022-29194)
Fixes a missing validation which causes denial of service via GetSessionTensor (CVE-2022-29191)
Fixes a missing validation which causes denial of service via StagePeek (CVE-2022-29195)
Fixes a missing validation which causes denial of service via UnsortedSegmentJoin (CVE-2022-29197)
Fixes a missing validation which causes denial of service via LoadAndRemapMatrix (CVE-2022-29199)
Fixes a missing validation which causes denial of service via SparseTensorToCSRSparseMatrix (CVE-2022-29198)
Fixes a missing validation which causes denial of service via LSTMBlockCell (CVE-2022-29200)
Fixes a missing validation which causes denial of service via Conv3DBackpropFilterV2 (CVE-2022-29196)
Fixes a CHECK failure in depthwise ops via overflows (CVE-2021-41197)
Fixes issues arising from undefined behavior stemming from users supplying invalid resource handles (CVE-2022-29207)
Fixes a segfault due to missing support for quantized types (CVE-2022-29205)
Fixes a missing validation which results in undefined behavior in SparseTensorDenseAdd (CVE-2022-29206)
Fixes a missing validation which results in undefined behavior in QuantizedConv2D (CVE-2022-29201)
Fixes an integer overflow in SpaceToBatchND (CVE-2022-29203)
Fixes a segfault and OOB write due to incomplete validation in EditDistance (CVE-2022-29208)
Fixes a missing validation which causes denial of service via Conv3DBackpropFilterV2 (CVE-2022-29204)
Fixes a denial of service in tf.ragged.constant due to lack of validation (CVE-2022-29202)
Fixes a segfault when tf.histogram_fixed_width is called with NaN values (CVE-2022-29211)
Fixes a core dump when loading TFLite models with quantization (CVE-2022-29212)
Fixes crashes stemming from incomplete validation in signal ops (CVE-2022-29213)
Fixes a type confusion leading to CHECK-failure based denial of service (CVE-2022-29209)
Updates curl to 7.83.1 to handle (CVE-2022-22576, (CVE-2022-27774, (CVE-2022-27775, (CVE-2022-27776, (CVE-2022-27778, (CVE-2022-27779, (CVE-2022-27780, (CVE-2022-27781, (CVE-2022-27782 and (CVE-2022-30115
Updates zlib to 1.2.12 after 1.2.11 was pulled due to security issue