Uploaded image for project: 'AI Platform Core Components'
  1. AI Platform Core Components
  2. AIPCC-9435

[model-opt] RHAIIS 3.3 model-opt image has 2 CVEs

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • None
    • Development Platform
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • Critical

      Description of problem:

      There are two CVEs reported on quay for the RHAIIS 3.3 model-opt image: 

gnugp2:
buggy 2.3.3-4.el90 included, to be fixed in 2.3.3-4.el9_6.1

      https://quay.io/repository/aipcc/rhaiis-model-opt/cuda-ubi9/manifest/sha256:a4ae3127c991549f9fd08cca1440bf7e7e4d30ddf2ea90fb722f9560170eef3c?tab=vulnerabilities

      Version numbers (base image, wheels, builder, etc):

          quay.io/aipcc/rhaiis-model-opt/cuda-ubi9:3.3.0-1769531165

      It comes from cuda base image:

      quay.io/aipcc/base-images/cuda-13.0-el9.6:3.3.0-1768562961 

              cheimes@redhat.com Christian Heimes
              rh-ee-dahuang Dan Huang
              Antonio's Team
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: