The TensorFlow project will release new versions of all supported release versions (i.e., last 3 releases) on or shortly after Monday, May 16th, 2022 (we estimate a maximum delay of at most 2 days). These releases will be followed by TensorFlow 2.9.0 final release, which also includes the fixes for the vulnerabilities.
We have a total of 25 vulnerabilities to patch (a small number of them only apply to the newest release, but the large majority apply to all releases):
* Critical vulnerabilities: 1
* High severity issues: 3
* Moderate severity issues: 1
* Low severity issues: 20
The fixes are already in the TensorFlow's r2.6, r2.7, r2.8 and r2.9 branches. These branches are all ready for the build scripts, if there are no unexpected failures there won't be any new changes to them until the release.
Tensors must flow securely