| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| tensorflow | ≥ 2.7.0, < 2.7.2≥ 2.8.0, < 2.8.1< 2.6.4 | 2.7.22.8.12.6.4 |
| tensorflow-cpu | ≥ 2.7.0, < 2.7.2≥ 2.8.0, < 2.8.1< 2.6.4 | 2.7.22.8.12.6.4 |
| tensorflow-gpu | ≥ 2.7.0, < 2.7.2≥ 2.8.0, < 2.8.1< 2.6.4 | 2.7.22.8.12.6.4 |
| tensorflow | = 2.7.0= 2.8.0= 2.9.0≥ 2.7.0, < 2.7.2< 2.6.4 | 2.7.22.6.4 |
The tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d lack input validation and under certain condition can result in crashes (due to CHECK-failures).
We have patched the issue in GitHub commit 0a8a781e597b18ead006d19b7d23d0a369e9ad73 (merging GitHub PR #55274).
The fix will be included in TensorFlow 2.9.0. We will also cherrypick this commit on TensorFlow 2.8.1, TensorFlow 2.7.2, and TensorFlow 2.6.4, as these are also affected and still in supported range.
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
This vulnerability has been reported externally via a GitHub issue.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí