diff --git a/constraints.txt b/constraints.txt index 25ae35bdecfc..7dd0d6747765 100644 --- a/constraints.txt +++ b/constraints.txt @@ -1,10 +1,8 @@ # These vulnerabilities were inherited from the base image (pytorch:25.12-py3) and should be removed when the base image # is updated. -# WAR against https://github.com/advisories/GHSA-38jv-5279-wg99 -urllib3>=2.6.3 # WAR against https://github.com/advisories/GHSA-8rrh-rw8j-w5fx wheel>=0.46.2 -# WAR against https://github.com/advisories/GHSA-7gcm-g887-7qv7 -protobuf>=6.33.5 -# WAR against https://github.com/advisories/GHSA-6mq8-rvhq-8wgg -aiohttp>=3.13.3 +# WAR against https://github.com/advisories/GHSA-qjxf-f2mg-c6mc +tornado>=6.5.5 +# WAR against https://github.com/advisories/GHSA-3936-cmfr-pm3m +black>=26.3.1 diff --git a/docker/Dockerfile.multi b/docker/Dockerfile.multi index a03fbdbd757e..96b75cd96a43 100644 --- a/docker/Dockerfile.multi +++ b/docker/Dockerfile.multi @@ -52,9 +52,10 @@ RUN --mount=type=bind,source=docker/common,target=/opt/docker/common \ # Install constraints after install.sh so cleanup() doesn't delete the file mid-RUN COPY constraints.txt /tmp/constraints.txt RUN --mount=type=cache,target=/root/.cache/pip \ + # WAR: uninstall dependencies that has vulnerability + pip3 uninstall -y tornado black nbconvert || true && \ pip3 install --ignore-installed --no-cache-dir -r /tmp/constraints.txt && \ - rm /tmp/constraints.txt && \ - pip3 uninstall -y nbconvert || true + rm /tmp/constraints.txt # Install UCX, NIXL, etcd # TODO: Combine these into the main install.sh script diff --git a/jenkins/current_image_tags.properties b/jenkins/current_image_tags.properties index 98829d692b8f..8d751664640b 100644 --- a/jenkins/current_image_tags.properties +++ b/jenkins/current_image_tags.properties @@ -13,7 +13,7 @@ # images are adopted from PostMerge pipelines, the abbreviated commit hash is used instead. IMAGE_NAME=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm -LLM_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:pytorch-26.02-py3-x86_64-ubuntu24.04-trt10.15.1.29-skip-tritondevel-202603241450-12102 -LLM_SBSA_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:pytorch-26.02-py3-aarch64-ubuntu24.04-trt10.15.1.29-skip-tritondevel-202603241450-12102 -LLM_ROCKYLINUX8_PY310_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:cuda-13.1.1-devel-rocky8-x86_64-rocky8-py310-trt10.15.1.29-skip-tritondevel-202603241450-12102 -LLM_ROCKYLINUX8_PY312_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:cuda-13.1.1-devel-rocky8-x86_64-rocky8-py312-trt10.15.1.29-skip-tritondevel-202603241450-12102 +LLM_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:pytorch-26.02-py3-x86_64-ubuntu24.04-trt10.15.1.29-skip-tritondevel-202604011104-12600 +LLM_SBSA_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:pytorch-26.02-py3-sbsa-ubuntu24.04-trt10.15.1.29-skip-tritondevel-202604011104-12600 +LLM_ROCKYLINUX8_PY310_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:cuda-13.1.1-devel-rocky8-x86_64-rocky8-py310-trt10.15.1.29-skip-tritondevel-202604011104-12600 +LLM_ROCKYLINUX8_PY312_DOCKER_IMAGE=urm.nvidia.com/sw-tensorrt-docker/tensorrt-llm:cuda-13.1.1-devel-rocky8-x86_64-rocky8-py312-trt10.15.1.29-skip-tritondevel-202604011104-12600