|
| 1 | +# Release 2.3.1 |
| 2 | + |
| 3 | +## Bug Fixes and Other Changes |
| 4 | +* Fixes an undefined behavior causing a segfault in `tf.raw_ops.Switch` |
| 5 | + ([CVE-2020-15190](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15190)) |
| 6 | +* Fixes three vulnerabilities in conversion to DLPack format |
| 7 | + ([CVE-2020-15191](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15191), |
| 8 | + [CVE-2020-15192](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15192), |
| 9 | + [CVE-2020-15193](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15193)) |
| 10 | +* Fixes two vulnerabilities in `SparseFillEmptyRowsGrad` |
| 11 | + ([CVE-2020-15194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15194), |
| 12 | + [CVE-2020-15195](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15195)) |
| 13 | +* Fixes several vulnerabilities in `RaggedCountSparseOutput` and |
| 14 | + `SparseCountSparseOutput` operations |
| 15 | + ([CVE-2020-15196](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15196), |
| 16 | + [CVE-2020-15197](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15197), |
| 17 | + [CVE-2020-15198](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15198), |
| 18 | + [CVE-2020-15199](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15199), |
| 19 | + [CVE-2020-15200](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15200), |
| 20 | + [CVE-2020-15201](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15201)) |
| 21 | +* Fixes an integer truncation vulnerability in code using the work sharder API |
| 22 | + ([CVE-2020-15202](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15202)) |
| 23 | +* Fixes a format string vulnerability in `tf.strings.as_string` |
| 24 | + ([CVE-2020-15203](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15203)) |
| 25 | +* Fixes segfault raised by calling session-only ops in eager mode |
| 26 | + ([CVE-2020-15204](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15204)) |
| 27 | +* Fixes data leak and potential ASLR violation from `tf.raw_ops.StringNGrams` |
| 28 | + ([CVE-2020-15205](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15205)) |
| 29 | +* Fixes segfaults caused by incomplete `SavedModel` validation |
| 30 | + ([CVE-2020-15206](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15206)) |
| 31 | +* Fixes a data corruption due to a bug in negative indexing support in TFLite |
| 32 | + ([CVE-2020-15207](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15207)) |
| 33 | +* Fixes a data corruption due to dimension mismatch in TFLite |
| 34 | + ([CVE-2020-15208](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15208)) |
| 35 | +* Fixes several vulnerabilities in TFLite saved model format |
| 36 | + ([CVE-2020-15209](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15209), |
| 37 | + [CVE-2020-15210](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15210), |
| 38 | + [CVE-2020-15211](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15211)) |
| 39 | +* Fixes several vulnerabilities in TFLite implementation of segment sum |
| 40 | + ([CVE-2020-15212](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15212), |
| 41 | + [CVE-2020-15213](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15213), |
| 42 | + [CVE-2020-15214](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15214)) |
| 43 | +* Updates `sqlite3` to `3.33.00` to handle |
| 44 | + [CVE-2020-15358](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15358). |
| 45 | +* Fixes deprecated usage of `collections` API |
| 46 | +* Removes `scipy` dependency from `setup.py` since TensorFlow does not need it |
| 47 | + to install the pip package |
| 48 | + |
1 | 49 | # Release 2.3.0 |
2 | 50 |
|
3 | 51 | ## Major Features and Improvements |
|
0 commit comments