Some fixes for security issue

NVIDIA-Merlin / Merlin

NVIDIA Merlin is an open source library providing end-to-end GPU-accelerated recommender systems, from feature engineering and preprocessing to training deep learning models and running inference in production.

Apache License 2.0

715 stars 111 forks source link

Some fixes for security issue #1094

Closed EmmaQiaoCh closed 5 months ago

EmmaQiaoCh commented 5 months ago

Add install new libc and libc-bin for 'CVE-2023-4911' Install pyarrow-hotfix for 'https://github.com/advisories/GHSA-5wvp-7f3h-6wmm' Please note, because new transformers will be not compatible with the target fassis version and other merlin repo(such as Transformers4Rec), so I didn't updated it.

copy-pr-bot[bot] commented 5 months ago

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

EmmaQiaoCh commented 5 months ago

/ok to test

github-actions[bot] commented 5 months ago

Documentation preview

https://nvidia-merlin.github.io/Merlin/review/pr-1094