Address CVEs

Author: Malav Shastri

docker/1.3-1/base/Dockerfile.cpu

@@ -9,8 +9,8 @@ ARG CONDA_PY_VERSION=39
 ARG CONDA_CHECKSUM="b4e46fcc8029e2cfa731b788f25b1d36"
 ARG CONDA_PKG_VERSION=4.10.1
 ARG PYTHON_VERSION=3.7.10
-ARG PYARROW_VERSION=1.0
-ARG MLIO_VERSION=0.7.0
+ARG PYARROW_VERSION=14.0.1
+ARG MLIO_VERSION=0.9.0
 ARG XGBOOST_VERSION=1.3.3
 
 ENV DEBIAN_FRONTEND=noninteractive
@@ -44,6 +44,8 @@ RUN rm /etc/apt/sources.list.d/cuda.list && \
     # MLIO build dependencies
     # Official Ubuntu APT repositories do not contain an up-to-date version of CMake required to build MLIO.
     # Kitware contains the latest version of CMake.
+    wget http://es.archive.ubuntu.com/ubuntu/pool/main/libf/libffi/libffi7_3.3-4_amd64.deb && \
+    dpkg -i libffi7_3.3-4_amd64.deb && \
     apt-get -y install --no-install-recommends \
         apt-transport-https \
         ca-certificates \
@@ -113,7 +115,7 @@ RUN echo "conda ${CONDA_PKG_VERSION}" >> /miniconda3/conda-meta/pinned && \
     python3 -m pip install typing && \
     python3 -m pip install --upgrade pip && \
     python3 -m pip install dist/*.whl && \
-    cp -r /tmp/mlio/build/third-party/lib/intel64/gcc4.7/* /usr/local/lib/ && \
+    cp -r /tmp/mlio/build/third-party/lib/libtbb* /usr/local/lib/ && \
     ldconfig && \
     rm -rf /tmp/mlio
 

requirements.txt

@@ -8,7 +8,7 @@ gunicorn==19.10.0
 itsdangerous==2.0.1
 matplotlib==3.4.1
 multi-model-server==1.1.2
-numpy==1.21.6
+numpy==1.24.1
 pandas==1.2.4
 protobuf==3.20.1
 psutil==5.6.7  # sagemaker-containers requires psutil 5.6.7
@@ -24,3 +24,5 @@ wheel==0.36.2
 jinja2==2.10.2
 MarkupSafe==1.1.1
 Werkzeug==0.15.6
+certifi==2023.7.22
+gevent==23.9.1

src/sagemaker_xgboost_container/algorithm_mode/serve_utils.py

@@ -91,8 +91,8 @@ def _get_sparse_matrix_from_libsvm(payload):
                 data.append(val)
 
     row = np.array(row)
-    col = np.array(col).astype(np.int)
-    data = np.array(data).astype(np.float)
+    col = np.array(col).astype(int)
+    data = np.array(data).astype(float)
     if not (len(row) == len(col) and len(col) == len(data)):
         raise RuntimeError("Dimension checking failed when transforming sparse matrix.")
 
@@ -106,7 +106,7 @@ def parse_content_data(input_data, input_content_type):
     if content_type == CSV:
         try:
             decoded_payload = payload.strip().decode("utf-8")
-            dtest = encoder.csv_to_dmatrix(decoded_payload, dtype=np.float)
+            dtest = encoder.csv_to_dmatrix(decoded_payload, dtype=float)
         except Exception as e:
             raise RuntimeError("Loading csv data failed with Exception, "
                                "please ensure data is in csv format:\n {}\n {}".format(type(e), e))

tox.ini

@@ -17,9 +17,9 @@ deps =
     -r{toxinidir}/requirements.txt
     -r{toxinidir}/test-requirements.txt
 conda_deps=
-    pyarrow==1.0.1
+    pyarrow==14.0.1
     tbb==2020.2
-    mlio-py==0.7.0
+    mlio-py==0.9.0
 conda_channels=
     conda-forge
     mlio