FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-23 05:42:14 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
52311651-f100-4720-8c62-0887dad6d321py-tensorflow -- unchecked argument causing crash

Jingyi Shi reports:

The 'AvgPoolOp' function takes an argument `ksize` that must be positive but is not checked.

A negative `ksize` can trigger a `CHECK` failure and crash the program.


Discovery 2022-09-16
Entry 2023-04-09
py37-tensorflow
py38-tensorflow
py39-tensorflow
py310-tensorflow
py311-tensorflow
< 2.7.2

>= 2.8.0 lt 2.8.1

>= 2.9.0 lt 2.9.2

CVE-2022-35941
https://osv.dev/vulnerability/GHSA-mgmh-g2v6-mqw5
ae132c6c-d716-11ed-956f-7054d21a9e2apy-tensorflow -- denial of service vulnerability

Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report:

Another instance of CVE-2022-35935, where `SobolSample` is vulnerable to a denial of service via assumed scalar inputs, was found and fixed.

Pattarakrit Rattankul reports:

Another instance of CVE-2022-35991, where `TensorListScatter` and `TensorListScatterV2` crash via non scalar inputs in`element_shape`, was found in eager mode and fixed.


Discovery 2022-11-21
Entry 2023-04-09
py37-tensorflow
py38-tensorflow
py39-tensorflow
py310-tensorflow
py311-tensorflow
< 2.8.4

>= 2.9.0 lt 2.9.3

>= 2.10.0 lt 2.10.1

CVE-2022-35935
https://osv.dev/vulnerability/GHSA-cqvq-fvhr-v6hc
CVE-2022-35991
https://osv.dev/vulnerability/GHSA-xf83-q765-xm6m