CVE catalog

CVE-2021-37668

Security update for tensorflow2

[CVE catalog]

This update for tensorflow fixes the following issues: Update to TF2 2.6.0 which fixes multiple CVEs (boo#1189423). - Introduction of bazel6.3 and basel-skylib1.0.3 as build dependencies. The latter has been adapted to all a version in its package name (if %set_ver_suffix is set to 1). This allows multiple versions to exist for one product (not installed). NOTE: basel-skylib1.0.3 does not exist in oS:Factory: basel-skylib in oS:Factory - the base version - is 1.0.3.

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.15% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Susepackage hub 15 sp3bazel-skylib1.0.31.0.3-bp153.2.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3bazel3.73.7.2-bp153.4.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow22.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2-lite2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2_2_6_0-gnu-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2_2_6_0-gnu-openmpi2-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3bazel-skylib1.0.31.0.3-bp153.2.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3bazel3.73.7.2-bp153.4.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow22.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2-lite2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2_2_6_0-gnu-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2_2_6_0-gnu-openmpi2-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Opensuseleap 15.3bazel-skylib1.0.31.0.3-bp153.2.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3bazel3.73.7.2-bp153.4.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow22.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2-lite2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2_2_6_0-gnu-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Opensuseleap 15.3tensorflow2_2_6_0-gnu-openmpi2-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3bazel-skylib1.0.31.0.3-bp153.2.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3bazel3.73.7.2-bp153.4.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow22.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2-lite2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2_2_6_0-gnu-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Susepackage hub 15 sp3tensorflow2_2_6_0-gnu-openmpi2-hpc2.6.0-bp153.2.3.1UnknownSource applicability is not established[OPENSUSE-SU-2022:10014-1]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "bazel-skylib1.0.3",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.3-bp153.2.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "1.0.3-bp153.2.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "bazel3.7",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.7.2-bp153.4.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "3.7.2-bp153.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2-lite",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2_2_6_0-gnu-hpc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2_2_6_0-gnu-openmpi2-hpc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "bazel-skylib1.0.3",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.3-bp153.2.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "1.0.3-bp153.2.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "bazel3.7",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.7.2-bp153.4.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "3.7.2-bp153.4.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2-lite",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2_2_6_0-gnu-hpc",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    },
    {
      "name": "tensorflow2_2_6_0-gnu-openmpi2-hpc",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.6.0-bp153.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1",
      "fixed_version": "2.6.0-bp153.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10014-1",
      "provider_updated_at": "2026-02-04T02:20:34.480131Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]