fix: remove duplicate cerifi line and add comment linking to CVE

amazon-braket · Sep 20, 2023 · 3e89163 · 3e89163
1 parent ee04c21
commit 3e89163
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tensorflow/jobs/docker/2.12/py3/Dockerfile.gpu b/tensorflow/jobs/docker/2.12/py3/Dockerfile.gpu
@@ -14,6 +14,7 @@ RUN apt-get update \
 
 # Ensure below libraries are pinned to mitigate vulnerability
 RUN ${PIP} install --no-cache --upgrade \
+# https://nvd.nist.gov/vuln/detail/CVE-2023-37920
         certifi>=2023.7.22  
 
 # Installing our custom python libraries
@@ -42,8 +43,7 @@ RUN ${PIP} install --no-cache --upgrade \
         scikit-learn==1.2.2 \
         six==1.16.0 \
         scipy==1.9.3 \
-        typing_extensions==4.3.0 \
-        certifi==2023.7.22
+        typing_extensions==4.3.0
 
 RUN ${PIP} install --no-cache --upgrade sagemaker-training==4.4.10