Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency torch to v2 [SECURITY] #151

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 25, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
torch >=1.2,<2.1 -> >=2.2.0,<2.3 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.

CVE-2024-31580

PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.4,<3 [SECURITY] Jul 28, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from f59718f to 18d5c06 Compare July 28, 2024 17:35
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 18d5c06 to ad272b1 Compare July 28, 2024 18:03
@renovate renovate bot changed the title Update dependency torch to >=2.4,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Jul 28, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from ad272b1 to 62556a3 Compare October 9, 2024 08:15
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.4,<3 [SECURITY] Oct 9, 2024
@renovate renovate bot changed the title Update dependency torch to >=2.4,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Oct 9, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 62556a3 to 88db8b7 Compare October 9, 2024 10:52
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 88db8b7 to ccdfbfc Compare October 28, 2024 15:42
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.5,<3 [SECURITY] Oct 28, 2024
@renovate renovate bot changed the title Update dependency torch to >=2.5,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Oct 28, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from ccdfbfc to 4a1d578 Compare October 28, 2024 18:21
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 4a1d578 to c95af66 Compare December 2, 2024 12:37
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.5,<3 [SECURITY] Dec 2, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from c95af66 to 78e6998 Compare December 2, 2024 17:46
@renovate renovate bot changed the title Update dependency torch to >=2.5,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Dec 2, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 78e6998 to 60ddedd Compare December 17, 2024 20:53
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.5,<3 [SECURITY] Dec 17, 2024
@renovate renovate bot changed the title Update dependency torch to >=2.5,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Dec 17, 2024
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 60ddedd to 22d99e7 Compare December 17, 2024 22:21
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 9b01177 to 41054f2 Compare January 30, 2025 15:05
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.6,<3 [SECURITY] Jan 30, 2025
@renovate renovate bot changed the title Update dependency torch to >=2.6,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Jan 30, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 41054f2 to 2a95860 Compare January 30, 2025 18:51
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 2a95860 to 816d226 Compare February 9, 2025 12:52
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.6,<3 [SECURITY] Feb 9, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 816d226 to ce43001 Compare February 9, 2025 17:07
@renovate renovate bot changed the title Update dependency torch to >=2.6,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Feb 9, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from ce43001 to e807ebc Compare March 3, 2025 12:05
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.6,<3 [SECURITY] Mar 3, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from e807ebc to 3cdb739 Compare March 3, 2025 16:36
@renovate renovate bot changed the title Update dependency torch to >=2.6,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Mar 3, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 3cdb739 to be833f9 Compare March 11, 2025 12:30
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.6,<3 [SECURITY] Mar 11, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from be833f9 to a528743 Compare March 11, 2025 19:27
@renovate renovate bot changed the title Update dependency torch to >=2.6,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Mar 11, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from a528743 to 6dff832 Compare March 17, 2025 12:59
@renovate renovate bot changed the title Update dependency torch to v2 [SECURITY] Update dependency torch to >=2.6,<3 [SECURITY] Mar 17, 2025
@renovate renovate bot changed the title Update dependency torch to >=2.6,<3 [SECURITY] Update dependency torch to v2 [SECURITY] Mar 17, 2025
@renovate renovate bot force-pushed the renovate/pypi-torch-vulnerability branch from 6dff832 to 23e34f4 Compare March 17, 2025 20:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants