TensorFlow 1.15.5
Release 1.15.5
Note that this is the last patch release for the TensorFlow 1.x series.
Bug Fixes and Other Changes
- Fixes an access to unitialized memory in Eigen code (CVE-2020-26266)
- Fixes a security vulnerability caused by lack of validation in
tf.raw_ops.DataFormatVecPermuteandtf.raw_ops.DataFormatDimMap(CVE-2020-26267) - Fixes a vulnerability caused by attempting to write to immutable memory region in
tf.raw_ops.ImmutableConst(CVE-2020-26268 - Fixes a
CHECK-fail in LSTM with zero-length input (CVE-2020-26270) - Fixes a security vulnerability caused by accessing heap data outside of bounds when loading a specially crafted
SavedModel(CVE-2020-26271) - Updates
libjpeg-turboto2.0.5to handle CVE-2020-13790. - Updates
junitto4.13.1to handle CVE-2020-15250. - Updates
PCREto8.44to handle CVE-2019-20838 and CVE-2020-14155. - Updates
sqlite3to3.44.0to keep in sync with master branch.