Skip to content

Commit 7a321f5

Browse files
committed
Uninstall Pillow to fix the vulnerability
Signed-off-by: Yuanjing Xue <197832395+yuanjingx87@users.noreply.github.com>
1 parent 8175e14 commit 7a321f5

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

docker/Dockerfile.multi

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,8 @@ COPY constraints.txt /tmp/constraints.txt
7676
RUN pip3 install --no-cache-dir -r /tmp/constraints.txt && rm /tmp/constraints.txt
7777

7878
# Remove nbconvert to avoid https://github.com/advisories/GHSA-xm59-rqc7-hhvf in the base NGC PyTorch image.
79-
RUN pip3 uninstall -y nbconvert || true
79+
# Remove pillow to avoid https://github.com/advisories/GHSA-cfh3-3jmp-rvhc in the base NGC PyTorch image.
80+
RUN pip3 uninstall -y nbconvert pillow || true
8081

8182
# Install UCX, NIXL, etcd
8283
# TODO: Combine these into the main install.sh script

0 commit comments

Comments
 (0)