Skip to content

chore: patch pyarrow cve #446

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

chore: patch pyarrow cve #446

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
cd60c6f
chore: patch cves
evakravi Apr 1, 2025
a4912ba
chore: patch pyarrow + werkzeug (attempt 2)
evakravi Apr 2, 2025
8ab4e43
chore: patch pyarrow + werkzeug (attempt 3)
evakravi Apr 2, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions docker/1.7-1/base/Dockerfile.cpu
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ ARG CONDA_CHECKSUM=2006a61abc8b4fd04de5eb92620e1f72bada713cc84b5b4899463095e1210
ARG CONDA_PY_VERSION=39
ARG CONDA_PKG_VERSION=24.7.1
ARG PYTHON_VERSION=3.9
ARG PYARROW_VERSION=14.0.1
ARG PYARROW_VERSION=17.0.0
ARG MLIO_VERSION=0.9.0
ARG XGBOOST_VERSION=1.7.4

Expand Down Expand Up @@ -80,6 +80,7 @@ RUN apt-key del 7fa2af80 && \
&& \
python3 -m pip install --upgrade pip && \
python3 -m pip install --upgrade certifi && \
python3 -m pip install --upgrade pyarrow && \
apt-get clean && \
# Node.js setup
mkdir -p /etc/apt/keyrings && \
Expand Down Expand Up @@ -130,6 +131,7 @@ RUN echo "conda ${CONDA_PKG_VERSION}" >> /miniconda3/conda-meta/pinned && \
cd /tmp && \
git clone --branch v${MLIO_VERSION} https://github.com/awslabs/ml-io.git mlio && \
cd mlio && \
sed -i 's/find_package(Arrow 14.0.1 REQUIRED)/find_package(Arrow 17.0.0 REQUIRED)/' CMakeLists.txt && \
build-tools/build-dependency build/third-party all && \
mkdir -p build/release && \
cd build/release && \
Expand All @@ -150,4 +152,5 @@ RUN echo "conda ${CONDA_PKG_VERSION}" >> /miniconda3/conda-meta/pinned && \
rm -rf /tmp/mlio

# Install latest version of XGBoost
RUN python3 -m pip install --no-cache -I xgboost==${XGBOOST_VERSION}
RUN python3 -m pip install --no-cache -I xgboost==${XGBOOST_VERSION} && \
python3 -m pip install --no-cache 'werkzeug>=2.1.1'