Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tensorflow2 for openSUSE:Factory checked in at 2022-02-02 22:40:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tensorflow2 (Old) and /work/SRC/openSUSE:Factory/.tensorflow2.new.1898 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tensorflow2" Wed Feb 2 22:40:11 2022 rev:28 rq:950525 version:2.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/tensorflow2/tensorflow2.changes 2022-01-10 23:54:12.696836328 +0100 +++ /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/tensorflow2.changes 2022-02-02 22:40:31.455893571 +0100 @@ -1,0 +2,107 @@ +Tue Feb 1 17:44:12 UTC 2022 - Ben Greiner <c...@bnavigator.de> + +- Remove URLs from github zip archives for xnnpack transitive + dependencies: The GitHub archiver produces unreliable files + +------------------------------------------------------------------- +Sat Jan 22 20:52:02 UTC 2022 - Ben Greiner <c...@bnavigator.de> + +- Update to 2.7.0 + * Big changelog: at + https://github.com/tensorflow/tensorflow/releases/tag/v2.7.0 +- Security references: + * Fixes a code injection issue in saved_model_cli + (CVE-2021-41228) + * Fixes a vulnerability due to use of uninitialized value in + Tensorflow (CVE-2021-41225) + * Fixes a heap OOB in FusedBatchNorm kernels (CVE-2021-41223) + * Fixes an arbitrary memory read in ImmutableConst + (CVE-2021-41227) + * Fixes a heap OOB in SparseBinCount (CVE-2021-41226) + * Fixes a heap OOB in SparseFillEmptyRows (CVE-2021-41224) + * Fixes a segfault due to negative splits in SplitV + (CVE-2021-41222) + * Fixes segfaults and vulnerabilities caused by accesses to + invalid memory during shape inference in Cudnn* ops + (CVE-2021-41221) + * Fixes a null pointer exception when Exit node is not preceded + by Enter op (CVE-2021-41217) + * Fixes an integer division by 0 in tf.raw_ops.AllToAll + (CVE-2021-41218) + * Fixes a use after free and a memory leak in CollectiveReduceV2 + (CVE-2021-41220) + * Fixes an undefined behavior via nullptr reference binding in + sparse matrix multiplication (CVE-2021-41219) + * Fixes a heap buffer overflow in Transpose (CVE-2021-41216) + * Prevents deadlocks arising from mutually recursive tf.function + objects (CVE-2021-41213) + * Fixes a null pointer exception in DeserializeSparse + (CVE-2021-41215) + * Fixes an undefined behavior arising from reference binding to + nullptr in tf.ragged.cross (CVE-2021-41214) + * Fixes a heap OOB read in tf.ragged.cross (CVE-2021-41212) + * Fixes a heap OOB in shape inference for QuantizeV2 + (CVE-2021-41211) + * Fixes a heap OOB read in all tf.raw_ops.QuantizeAndDequantizeV* + ops (CVE-2021-41205) + * Fixes an FPE in ParallelConcat (CVE-2021-41207) + * Fixes FPE issues in convolutions with zero size filters + (CVE-2021-41209) + * Fixes a heap OOB read in tf.raw_ops.SparseCountSparseOutput + (CVE-2021-41210) + * Fixes vulnerabilities caused by incomplete validation in + boosted trees code (CVE-2021-41208) + * Fixes vulnerabilities caused by incomplete validation of shapes + in multiple TF ops (CVE-2021-41206) + * Fixes a segfault produced while copying constant resource + tensor (CVE-2021-41204) + * Fixes a vulnerability caused by unitialized access in + EinsumHelper::ParseEquation (CVE-2021-41201) + * Fixes several vulnerabilities and segfaults caused by missing + validation during checkpoint loading (CVE-2021-41203) + * Fixes an overflow producing a crash in tf.range + (CVE-2021-41202) + * Fixes an overflow producing a crash in tf.image.resize when + size is large (CVE-2021-41199) + * Fixes an overflow producing a crash in tf.tile when tiling + tensor is large (CVE-2021-41198) + * Fixes a vulnerability produced due to incomplete validation in + tf.summary.create_file_writer (CVE-2021-41200) + * Fixes multiple crashes due to overflow and CHECK-fail in ops + with large tensor shapes (CVE-2021-41197) + * Fixes a crash in max_pool3d when size argument is 0 or negative + (CVE-2021-41196) + * Fixes a crash in tf.math.segment_* operations (CVE-2021-41195) + * Updates curl to 7.78.0 to handle CVE-2021-22922, + CVE-2021-22923, CVE-2021-22924, CVE-2021-22925, and + CVE-2021-22926. +- This drops support for Python 3.6 and thus for SLE/Leap 15 + See also https://code.opensuse.org/leap/features/issue/35 +- Closes boo#1195295 + * Note that tensorflow2 (non-lite) will be removed from + Tumbleweed soon if there are no volunteers, see leap feature + issue above. +- Have to migrate tensorflow-lite build to CMake as old Makefile + was dropped +- Drop patches no longer necessary or applicable + * tensorflow-2.6.0-remove-weakref.patch + * tensorflow-2.6.0-fix-lite.patch + * tensorflow-2.6.0-tf-keras-hdf5-3.patch + * tensorflow-2.6.0-removed-clog-build-as-included-in-cpuinfo.patch + * tensorflow-2.6.0-numpy-tensor-small.patch +- fix double nested unpacking and refresh patches, migrate to -p1 + * tensorflow-2.6.0-removed-external-toolchains.patch + * tensorflow-2.6.0-compile-with-protobuf-3.16.patch +- Add #tensorflow-2.7.0-fix-lite.patch + * https://github.com/tensorflow/tensorflow/commit/fb1dcbd9 + * gh#tensorflow/tensorflow#54216 +- Have to use grpc and upb from bazelcache, pulls in go + * Add tensorflow-2.7.0-go_host_sdk.patch -- use system SDK + instead of downloading a binary blob + +------------------------------------------------------------------- +Tue Jan 11 09:41:07 UTC 2022 - Guillaume GARDET <guillaume.gar...@opensuse.org> + +- Remove more python dependencies for tensorflow2-lite + +------------------------------------------------------------------- Old: ---- license.rst.txt oneDNN-v2.3-rc2.tar.gz release-1.8.0.tar.gz tensorflow-2.6.0-fix-lite.patch tensorflow-2.6.0-numpy-tensor-small.patch tensorflow-2.6.0-remove-weakref.patch tensorflow-2.6.0-removed-clog-build-as-included-in-cpuinfo.patch tensorflow-2.6.0-tf-keras-hdf5-3.patch tensorflow-2.6.2.tar.gz tensorflow2-rpmlintrc New: ---- FP16.zip FXdiv.zip clog.tar.gz envoyproxy.tar.gz flatbuffers.tar.gz grpc.tar.gz oneDNN-2.4.tar.gz psimd.zip pthreadpool.zip tensorflow-2.7.0-fix-lite.patch tensorflow-2.7.0-go_host_sdk.patch tensorflow-2.7.0.tar.gz upb.tar.gz xnnpack.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ tensorflow2.spec ++++++ ++++ 795 lines (skipped) ++++ between /work/SRC/openSUSE:Factory/tensorflow2/tensorflow2.spec ++++ and /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/tensorflow2.spec ++++++ ComputeLibrary.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/ComputeLibrary.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/ComputeLibrary.tar.gz differ: char 27, line 2 ++++++ eigen.tar.gz ++++++ ++++ 25080 lines of diff (skipped) ++++++ farmhash.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/farmhash-816a4ae622e964763ca0862d9dbd19324a1eaf45/src/farmhash.cc new/farmhash-0d859a811870d10f53a594927d0d0b97573ad06d/src/farmhash.cc --- old/farmhash-816a4ae622e964763ca0862d9dbd19324a1eaf45/src/farmhash.cc 2017-09-13 22:13:37.000000000 +0200 +++ new/farmhash-0d859a811870d10f53a594927d0d0b97573ad06d/src/farmhash.cc 2019-05-13 23:45:59.000000000 +0200 @@ -114,7 +114,7 @@ #if defined(FARMHASH_UNKNOWN_ENDIAN) || !defined(bswap_64) -#ifdef _MSC_VER +#ifdef _WIN32 #undef bswap_32 #undef bswap_64 @@ -165,10 +165,20 @@ #define bswap_64(x) bswap64(x) #endif +#elif defined(__HAIKU__) + +#define _BSD_SOURCE +#include <bsd/endian.h> +#undef bswap_32 +#undef bswap_64 +#define bswap_32(x) bswap32(x) +#define bswap_64(x) bswap64(x) + #else #undef bswap_32 #undef bswap_64 +#undef _BYTESWAP_H #include <byteswap.h> #endif @@ -216,7 +226,7 @@ return shift == 0 ? val : ((val >> shift) | (val << (64 - shift))); } -#if defined(_MSC_VER) && defined(FARMHASH_ROTR) +#if defined(_WIN32) && defined(FARMHASH_ROTR) STATIC_INLINE uint32_t Rotate32(uint32_t val, int shift) { return sizeof(unsigned long) == sizeof(val) ? diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/farmhash-816a4ae622e964763ca0862d9dbd19324a1eaf45/src/farmhash.h new/farmhash-0d859a811870d10f53a594927d0d0b97573ad06d/src/farmhash.h --- old/farmhash-816a4ae622e964763ca0862d9dbd19324a1eaf45/src/farmhash.h 2017-09-13 22:13:37.000000000 +0200 +++ new/farmhash-0d859a811870d10f53a594927d0d0b97573ad06d/src/farmhash.h 2019-05-13 23:45:59.000000000 +0200 @@ -305,7 +305,7 @@ #if !defined(FARMHASH_BIG_ENDIAN) #define FARMHASH_BIG_ENDIAN #endif -#elif defined(__linux__) || defined(__CYGWIN__) || defined( __GNUC__ ) || defined( __GNU_LIBRARY__ ) +#elif defined(__linux__) || defined(__CYGWIN__) || defined( __GNUC__ ) && !defined(_WIN32) || defined( __GNU_LIBRARY__ ) #include <endian.h> // libc6-dev, GLIBC #if BYTE_ORDER == BIG_ENDIAN #if !defined(FARMHASH_BIG_ENDIAN) ++++++ fft2d.tgz ++++++ ++++ 14588 lines of diff (skipped) ++++++ llvm.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/llvm.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/llvm.tar.gz differ: char 13, line 1 ++++++ oneDNN-v2.3-rc2.tar.gz -> oneDNN-2.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/oneDNN-v2.3-rc2.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/oneDNN-2.4.tar.gz differ: char 16, line 1 ++++++ oneDNN.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/oneDNN.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/oneDNN.tar.gz differ: char 16, line 1 ++++++ tensorflow-2.6.0-compile-with-protobuf-3.16.patch ++++++ --- /var/tmp/diff_new_pack.f2Pibr/_old 2022-02-02 22:40:37.607851873 +0100 +++ /var/tmp/diff_new_pack.f2Pibr/_new 2022-02-02 22:40:37.611851846 +0100 @@ -1,5 +1,5 @@ ---- a/tensorflow-2.6.0/tensorflow/core/kernels/example_parsing_ops.cc -+++ b/tensorflow-2.6.0/tensorflow/core/kernels/example_parsing_ops.cc +--- a/tensorflow/core/kernels/example_parsing_ops.cc ++++ b/tensorflow/core/kernels/example_parsing_ops.cc @@ -1218,7 +1218,7 @@ class DecodeJSONExampleOp : public OpKer resolver_.get(), "type.googleapis.com/tensorflow.Example", &in, &out); OP_REQUIRES(ctx, status.ok(), ++++++ tensorflow-2.6.0-removed-external-toolchains.patch ++++++ --- /var/tmp/diff_new_pack.f2Pibr/_old 2022-02-02 22:40:37.619851792 +0100 +++ /var/tmp/diff_new_pack.f2Pibr/_new 2022-02-02 22:40:37.623851765 +0100 @@ -1,5 +1,7 @@ ---- a/tensorflow-2.6.0/tensorflow/workspace0.bzl -+++ b/tensorflow-2.6.0/tensorflow/workspace0.bzl +Index: tensorflow-2.7.0/tensorflow/workspace0.bzl +=================================================================== +--- tensorflow-2.7.0.orig/tensorflow/workspace0.bzl ++++ tensorflow-2.7.0/tensorflow/workspace0.bzl @@ -5,7 +5,6 @@ load("@bazel_tools//tools/build_defs/rep load("@bazel_toolchains//repositories:repositories.bzl", bazel_toolchains_repositories = "repositories") load("@build_bazel_rules_swift//swift:repositories.bzl", "swift_rules_dependencies") @@ -41,13 +43,15 @@ # If a target is bound twice, the later one wins, so we have to do tf bindings # at the end of the WORKSPACE file. ---- a/tensorflow-2.6.0/tensorflow/workspace1.bzl -+++ b/tensorflow-2.6.0/tensorflow/workspace1.bzl +Index: tensorflow-2.7.0/tensorflow/workspace1.bzl +=================================================================== +--- tensorflow-2.7.0.orig/tensorflow/workspace1.bzl ++++ tensorflow-2.7.0/tensorflow/workspace1.bzl @@ -1,6 +1,5 @@ """TensorFlow workspace initialization. Consult the WORKSPACE on how to use it.""" -load("//third_party/android:android_configure.bzl", "android_configure") - load("//third_party/toolchains/preconfig/generate:archives.bzl", "bazel_toolchains_archive") + load("@tf_toolchains//toolchains:archives.bzl", "bazel_toolchains_archive") load("@com_github_grpc_grpc//bazel:grpc_deps.bzl", "grpc_deps") load("@io_bazel_rules_closure//closure:defs.bzl", "closure_repositories") @@ -13,7 +12,6 @@ def workspace(): ++++++ tensorflow-2.6.0-fix-lite.patch -> tensorflow-2.7.0-fix-lite.patch ++++++ --- /work/SRC/openSUSE:Factory/tensorflow2/tensorflow-2.6.0-fix-lite.patch 2021-08-31 19:56:41.530038384 +0200 +++ /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/tensorflow-2.7.0-fix-lite.patch 2022-02-02 22:40:30.851897665 +0100 @@ -1,26 +1,24 @@ ---- a/tensorflow-2.6.0/tensorflow/lite/tools/make/Makefile -+++ b/tensorflow-2.6.0/tensorflow/lite/tools/make/Makefile -@@ -48,11 +48,12 @@ INCLUDES := \ - -I$(OBJDIR) - # This is at the end so any globally-installed frameworks like protobuf don't - # override local versions in the source tree. --INCLUDES += -I/usr/local/include -+INCLUDES += -I/usr/include +Index: tensorflow-2.7.0/tensorflow/lite/simple_memory_arena_debug_dump.cc +=================================================================== +--- tensorflow-2.7.0.orig/tensorflow/lite/simple_memory_arena_debug_dump.cc ++++ tensorflow-2.7.0/tensorflow/lite/simple_memory_arena_debug_dump.cc +@@ -15,6 +15,7 @@ limitations under the License. + #include <algorithm> + #include <cstdio> + #include <functional> ++#include <limits> + #include <queue> + #include <string> + #include <vector> +Index: tensorflow-2.7.0/tensorflow/lite/tools/cmake/modules/fft2d/CMakeLists.txt +=================================================================== +--- tensorflow-2.7.0.orig/tensorflow/lite/tools/cmake/modules/fft2d/CMakeLists.txt ++++ tensorflow-2.7.0/tensorflow/lite/tools/cmake/modules/fft2d/CMakeLists.txt +@@ -38,6 +38,7 @@ add_library(fft2d_fft4f2d "${FFT2D_SOURC + target_include_directories(fft2d_fft4f2d PRIVATE "${FFT2D_SOURCE_DIR}") - # These are the default libraries needed, but they can be added to or - # overridden by the platform-specific settings in target makefiles. - LIBS := \ -+-lflatbuffers \ - -lstdc++ \ - -lpthread \ - -lm \ -@@ -162,8 +163,7 @@ $(wildcard tensorflow/lite/tools/optimiz - $(PROFILER_SRCS) \ - tensorflow/lite/tools/make/downloads/farmhash/src/farmhash.cc \ - tensorflow/lite/tools/make/downloads/fft2d/fftsg.c \ --tensorflow/lite/tools/make/downloads/fft2d/fftsg2d.c \ --tensorflow/lite/tools/make/downloads/flatbuffers/src/util.cpp -+tensorflow/lite/tools/make/downloads/fft2d/fftsg2d.c - CORE_CC_ALL_SRCS += \ - $(shell find tensorflow/lite/tools/make/downloads/absl/absl/ \ - -type f -name \*.cc | grep -v test | grep -v benchmark | grep -v synchronization | grep -v debugging | grep -v hash | grep -v flags | grep -v random) + add_library(fft2d_fftsg "${FFT2D_SOURCE_DIR}/fftsg.c") ++target_link_libraries(fft2d_fftsg m) + + # Requires implementation of fft2d_alloc. + add_library(fft2d_fftsg2d "${FFT2D_SOURCE_DIR}/fftsg2d.c") ++++++ tensorflow-2.7.0-go_host_sdk.patch ++++++ Index: tensorflow-2.7.0/tensorflow/workspace0.bzl =================================================================== --- tensorflow-2.7.0.orig/tensorflow/workspace0.bzl +++ tensorflow-2.7.0/tensorflow/workspace0.bzl @@ -4,6 +4,7 @@ load("//third_party/googleapis:repositor load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive") load("@bazel_toolchains//repositories:repositories.bzl", bazel_toolchains_repositories = "repositories") load("@build_bazel_rules_swift//swift:repositories.bzl", "swift_rules_dependencies") +load("@io_bazel_rules_go//go:deps.bzl", "go_host_sdk") load("@com_github_grpc_grpc//bazel:grpc_extra_deps.bzl", "grpc_extra_deps") load("@rules_cc//cc:repositories.bzl", "rules_cc_toolchains") @@ -84,6 +85,11 @@ def workspace(): ], ) + # declare the system go as go_sdk so that we don't have to download binaries + go_host_sdk( + name = "go_sdk", + ) + rules_cc_toolchains() bazel_toolchains_repositories() ++++++ tensorflow-2.6.2.tar.gz -> tensorflow-2.7.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/tensorflow-2.6.2.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/tensorflow-2.7.0.tar.gz differ: char 13, line 1 ++++++ tf_runtime.tar.gz ++++++ /work/SRC/openSUSE:Factory/tensorflow2/tf_runtime.tar.gz /work/SRC/openSUSE:Factory/.tensorflow2.new.1898/tf_runtime.tar.gz differ: char 13, line 1 ++++++ tf_toolchains.tar.gz ++++++ ++++ 12594 lines of diff (skipped)
