Some fixes for security issue

NVIDIA-Merlin / Merlin

NVIDIA Merlin is an open source library providing end-to-end GPU-accelerated recommender systems, from feature engineering and preprocessing to training deep learning models and running inference in production.

Apache License 2.0

778 stars 118 forks source link

Some fixes for security issue #1094

Closed EmmaQiaoCh closed 10 months ago

EmmaQiaoCh commented 10 months ago

Add install new libc and libc-bin for 'CVE-2023-4911' Install pyarrow-hotfix for 'https://github.com/advisories/GHSA-5wvp-7f3h-6wmm' Please note, because new transformers will be not compatible with the target fassis version and other merlin repo(such as Transformers4Rec), so I didn't updated it.

copy-pr-bot[bot] commented 10 months ago

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

EmmaQiaoCh commented 10 months ago

/ok to test

github-actions[bot] commented 10 months ago

Documentation preview

https://nvidia-merlin.github.io/Merlin/review/pr-1094