Skip to content

Commit cd88f0c

Browse files
committed
Attempt libtiff uninstall to deal with vulnerability
Signed-off-by: Timur Rvachov <[email protected]>
1 parent 1b9f9a3 commit cd88f0c

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

Dockerfile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -372,3 +372,6 @@ RUN chmod 777 -R /workspace/bionemo2/
372372
# FIXME the following results in unstable training curves even if faster.
373373
# See https://github.com/NVIDIA/bionemo-framework/pull/421
374374
# ENV NVTE_FUSED_ATTN=1 NVTE_FLASH_ATTN=0
375+
# Remove libtiff just for v2.7 release due to CVE https://nvd.nist.gov/vuln/detail/CVE-2025-9900
376+
# This has no effect on bionemo since we do not do any image processing.
377+
RUN apt remove -qy libtiff6

0 commit comments

Comments
 (0)