gordo-client=3.0.5,gordo-dataset=2.6.4 (#1167)

* gordo-client=3.0.5,gordo-dataset=2.6.4 * Fixing CVEs in Dockerfile
equinor · Jun 22, 2021 · 550a958 · 550a958
1 parent a1943e6
commit 550a958
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 5 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -19,7 +19,13 @@ RUN cat /code/requirements/full_requirements.txt | grep tensorflow== > /code/pre
 
 FROM python:3.7.10-slim-buster
 
-RUN apt-get update && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y \
+    libgcrypt20=1.8.4-5+deb10u1 \
+    libgnutls30=3.6.7-4+deb10u7 \
+    libhogweed4=3.4.1-1+deb10u1 \
+    liblz4-1=1.8.3-1+deb10u1 \
+    libnettle6=3.4.1-1+deb10u1 \
+ && rm -rf /var/lib/apt/lists/*
 
 # Nonroot user for running CMD
 RUN groupadd -g 999 gordo && \

diff --git a/requirements/full_requirements.txt b/requirements/full_requirements.txt
@@ -53,8 +53,8 @@ gitpython==3.0.5          # via mlflow
 google-auth-oauthlib==0.4.1  # via tensorboard
 google-auth==1.10.1       # via google-auth-oauthlib, tensorboard
 google-pasta==0.2.0       # via tensorflow
-gordo-client==3.0.4       # via -r requirements.in
-gordo-dataset==2.6.3      # via -r requirements.in, gordo-client
+gordo-client==3.0.5       # via -r requirements.in
+gordo-dataset==2.6.4      # via -r requirements.in, gordo-client
 gorilla==0.3.0            # via mlflow
 graphviz==0.13.2          # via catboost
 grpcio==1.32.0            # via tensorboard, tensorflow

diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -24,8 +24,8 @@ typing_extensions~=3.7
 prometheus_client~=0.7.1
 azure-identity~=1.4.0
 PyYAML~=5.4
-gordo-dataset~=2.6.3
+gordo-dataset~=2.6.4
 jeepney>=0.6
 packaging~=20.7
 pydantic>=1.7.4
-gordo-client~=3.0.4
+gordo-client~=3.0.5