CVE-2021-22898

Advisory

Openvino-tensorflow 1.0.0 updates its dependency 'tensorflow' to v2.5.1 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

1. This release provides functional improvements and enhanced backend support from the previous release. This includes
- OpenVINO™ 2021.4.1 upgrade - Long Term Support release of OpenVINO™ with focus on stability and compatibility.
- TensorFlow v2.5.1 upgrade – Bug fixes and address vulnerabilities over TensorFlow 2.4.1 release.
- OpenVINO™ integration with TensorFlow samples in Intel DevCloud – User can learn and test this capability across multiple Intel hardware devices.
- TensorFlow 2.x compliant C++ samples covering additional use-cases.
- Enabled FP16 precision on iGPU backend.
- Increased model (TensorFlow Hub/ OpenVINO™ Model Zoo) coverage on all the supported Intel backends.
- Performance Optimizations of existing supported models on all Intel backends
- Preview support of INT8 quantized models using OpenVINO™ Neural Network Compression Framework (NNCF)
- API to export OpenVINO™ IR (Intermediate Representation) for easy transition to native OpenVINO™
2. Additional support for MacOS and Ubuntu 20.04 and Python 3.9.
3. Updated platform support for TigerLake and IceLake Family.
4. Documentation improvements
- Added Mandarin version of GitHub documentation
- Enhanced GitHub documentation

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22898