CVE-2020-13435

Advisory

Tensorpy 1.5.0 updates Tensorflow to v1.15.4 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Bring back ``tensorpy``

For awhile, ``tensorpy`` stopped working due to changes in ``tensorflow``.
Thanks to the release of https://pypi.org/project/tensorflow/1.15.4/, the following tensorflow issues / security vulnerabilities have been patched:
* https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cvpc-8phh-8f45
* https://github.com/tensorflow/tensorflow/security/advisories/GHSA-63xm-rx5p-xvqr

New ``tensorpy`` Python requirements:


tensorflow==1.15.4
six>=1.11.0
requests>=2.18.4
Pillow==5.4.1
BeautifulSoup4>=4.6.0


``tensorpy`` now has strict OS and Python requirements:

* <b>A Mac or Linux machine</b>
* <b>Python 3.5, 3.6, or 3.7</b>

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13435