QID 981536
QID 981536: Python (pip) Security Update for tensorflow-gpu (GHSA-w74j-v8xh-3w5h)
Security update has been released for tensorflow-gpu,tensorflow,tensorflow-cpu to fix the vulnerability.
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
An attacker can cause undefined behavior via binding a reference to null pointer in `tf.raw_ops.UnicodeEncode`:
```python
import tensorflow as tf
from tensorflow.python.ops import gen_string_ops
gen_string_ops.unicode_encode(
input_values=[],
input_splits=[],
output_encoding='UTF-8',
errors='ignore',
replacement_char='a')
```
The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/kernels/unicode_ops.cc#L533-L539) reads the first dimension of the `input_splits` tensor before validating that this tensor is not empty:
```cc
const Tensor& input_splits = context->input(1);
const auto input_splits_flat = input_splits.flat<SPLITS_TYPE>();
TensorShape output_shape({input_splits.dim_size(0) - 1});
```
The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.
- GHSA-w74j-v8xh-3w5h -
github.com/advisories/GHSA-w74j-v8xh-3w5h
CVEs related to QID 981536
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| GHSA-w74j-v8xh-3w5h | tensorflow |
|
|
| GHSA-w74j-v8xh-3w5h | tensorflow-cpu |
|
|
| GHSA-w74j-v8xh-3w5h | tensorflow-gpu |
|