Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some fixes for security issue #1094

Merged
merged 3 commits into from
Jan 15, 2024
Merged

Some fixes for security issue #1094

merged 3 commits into from
Jan 15, 2024

Conversation

EmmaQiaoCh
Copy link
Contributor

Add install new libc and libc-bin for 'CVE-2023-4911'
Install pyarrow-hotfix for 'GHSA-5wvp-7f3h-6wmm'
Please note, because new transformers will be not compatible with the target fassis version and other merlin repo(such as Transformers4Rec), so I didn't updated it.

Copy link

copy-pr-bot bot commented Jan 13, 2024

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@EmmaQiaoCh EmmaQiaoCh requested review from karlhigley, minseokl and jperez999 and removed request for karlhigley January 13, 2024 01:39
@EmmaQiaoCh EmmaQiaoCh added enhancement New feature or request 23.12 labels Jan 13, 2024
@EmmaQiaoCh
Copy link
Contributor Author

/ok to test

Copy link

Documentation preview

https://nvidia-merlin.github.io/Merlin/review/pr-1094

@EmmaQiaoCh EmmaQiaoCh merged commit d0e6311 into main Jan 15, 2024
7 of 9 checks passed
EmmaQiaoCh added a commit that referenced this pull request Jan 15, 2024
* Fix some security issue

* Change back version for transformers

* Add some comments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
23.12 enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants