Skip to content

Commit c8137f3

Browse files
author
Amit Patankar
authored
Merge pull request tensorflow#19089 from annarev/update_release_notes
Adding release notes for 1.7.1 release
2 parents 792edf6 + 8cda66f commit c8137f3

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

RELEASE.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,14 @@
1+
# Release 1.7.1
2+
3+
## Bug Fixes and Other Changes
4+
* Fixes the following potential security vulnerabilities:
5+
* The TensorFlow Lite TOCO compiler did not perform correct boundary checks when reading from some fields within TFLite files.
6+
* The block size in meta file could contain a large int64 value which causes an integer overflow upon addition. Subsequent code using n as index may cause an out-of-bounds read.
7+
* TensorFlow checkpoint meta file uses Google's [https://github.com/google/snappy](snappy) compression/decompression library. There is a memcpy-param-overlap issue in the version of snappy currently used by TensorFlow.
8+
* A maliciously crafted configuration file passed into the TensorFlow XLA compiler could cause an invalid memory access and/or a heap buffer overflow.
9+
10+
11+
112
# Release 1.7.0
213

314
## Major Features And Improvements

0 commit comments

Comments
 (0)