CVE catalog
CVE-2021-37639
Security update for tensorflow2
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.17% · Oct 25, 2026
This update for tensorflow fixes the following issues: Update to TF2 2.6.0 which fixes multiple CVEs (boo#1189423). - Introduction of bazel6.3 and basel-skylib1.0.3 as build dependencies. The latter has been adapted to all a version in its package name (if %set_ver_suffix is set to 1). This allows multiple versions to exist for one product (not installed). NOTE: basel-skylib1.0.3 does not exist in oS:Factory: basel-skylib in oS:Factory - the base version - is 1.0.3.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | bazel-skylib1.0.3 | package hub 15 sp3 | 1.0.3-bp153.2.1 | fixed |
| Suse | bazel3.7 | package hub 15 sp3 | 3.7.2-bp153.4.1 | fixed |
| Suse | tensorflow2 | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | fixed |
| Suse | tensorflow2-lite | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | fixed |
| Suse | tensorflow2_2_6_0-gnu-hpc | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | fixed |
| Suse | tensorflow2_2_6_0-gnu-openmpi2-hpc | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | fixed |
| Opensuse | bazel-skylib1.0.3 | leap 15.3 | 1.0.3-bp153.2.1 | fixed |
| Opensuse | bazel3.7 | leap 15.3 | 3.7.2-bp153.4.1 | fixed |
| Opensuse | tensorflow2 | leap 15.3 | 2.6.0-bp153.2.3.1 | fixed |
| Opensuse | tensorflow2-lite | leap 15.3 | 2.6.0-bp153.2.3.1 | fixed |
| Opensuse | tensorflow2_2_6_0-gnu-hpc | leap 15.3 | 2.6.0-bp153.2.3.1 | fixed |
| Opensuse | tensorflow2_2_6_0-gnu-openmpi2-hpc | leap 15.3 | 2.6.0-bp153.2.3.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | bazel-skylib1.0.3 | rpm | package hub 15 sp3 | 1.0.3-bp153.2.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Suse | bazel3.7 | rpm | package hub 15 sp3 | 3.7.2-bp153.4.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Suse | tensorflow2 | rpm | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Suse | tensorflow2-lite | rpm | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Suse | tensorflow2_2_6_0-gnu-hpc | rpm | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Suse | tensorflow2_2_6_0-gnu-openmpi2-hpc | rpm | package hub 15 sp3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | bazel-skylib1.0.3 | rpm | leap 15.3 | 1.0.3-bp153.2.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | bazel3.7 | rpm | leap 15.3 | 3.7.2-bp153.4.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | tensorflow2 | rpm | leap 15.3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | tensorflow2-lite | rpm | leap 15.3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | tensorflow2_2_6_0-gnu-hpc | rpm | leap 15.3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
| Opensuse | tensorflow2_2_6_0-gnu-openmpi2-hpc | rpm | leap 15.3 | 2.6.0-bp153.2.3.1 | Not reported | OPENSUSE-SU-2022:10014-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: