tocsin

CVE-2021-41206

6 advisories.

PyPI/tensorflow CVE-2021-41206: high 7

Incomplete validation of shapes in multiple TF ops

Action: Upgrade tensorflow to 2.4.4 or later.

pip install tensorflow==2.6.1
pip install tensorflow==2.5.2
pip install tensorflow==2.4.4

Affected

introducedfixedlast affected
2.6.02.6.1-
2.5.02.5.2-
02.4.4-

Fixed versions

2.6.12.5.22.4.4

Sources

CVE-2021-41206 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2021-41206: high 7

Incomplete validation of shapes in multiple TF ops

Action: Upgrade tensorflow-cpu to 2.4.4 or later.

pip install tensorflow-cpu==2.6.1
pip install tensorflow-cpu==2.5.2
pip install tensorflow-cpu==2.4.4

Affected

introducedfixedlast affected
2.6.02.6.1-
2.5.02.5.2-
02.4.4-

Fixed versions

2.6.12.5.22.4.4

Sources

CVE-2021-41206 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2021-41206: high 7

Incomplete validation of shapes in multiple TF ops

Action: Upgrade tensorflow-gpu to 2.4.4 or later.

pip install tensorflow-gpu==2.6.1
pip install tensorflow-gpu==2.5.2
pip install tensorflow-gpu==2.4.4

Affected

introducedfixedlast affected
2.6.02.6.1-
2.5.02.5.2-
02.4.4-

Fixed versions

2.6.12.5.22.4.4

Sources

CVE-2021-41206 · published · modified · JSON

PyPI/tensorflow CVE-2021-41206: unknown

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depen

Action: Upgrade tensorflow to 2.4.4 or later.

pip install tensorflow==2.4.4
pip install tensorflow==2.5.2
pip install tensorflow==2.6.1

Affected

introducedfixedlast affected
02.4.4-
2.5.02.5.2-
2.6.02.6.1-

Fixed versions

2.4.42.5.22.6.1

Sources

CVE-2021-41206 · published · modified · JSON

PyPI/tensorflow-cpu CVE-2021-41206: unknown

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depen

Action: Upgrade tensorflow-cpu to 2.4.4 or later.

pip install tensorflow-cpu==2.4.4
pip install tensorflow-cpu==2.5.2
pip install tensorflow-cpu==2.6.1

Affected

introducedfixedlast affected
02.4.4-
2.5.02.5.2-
2.6.02.6.1-

Fixed versions

2.4.42.5.22.6.1

Sources

CVE-2021-41206 · published · modified · JSON

PyPI/tensorflow-gpu CVE-2021-41206: unknown

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depen

Action: Upgrade tensorflow-gpu to 2.4.4 or later.

pip install tensorflow-gpu==2.4.4
pip install tensorflow-gpu==2.5.2
pip install tensorflow-gpu==2.6.1

Affected

introducedfixedlast affected
02.4.4-
2.5.02.5.2-
2.6.02.6.1-

Fixed versions

2.4.42.5.22.6.1

Sources

CVE-2021-41206 · published · modified · JSON