model management environment vulnerability fix (#3741)

Azure · Jan 13, 2025 · d8e0c5b · d8e0c5b
1 parent 8cae53f
commit d8e0c5b
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/assets/training/model_management/environments/model-management/context/Dockerfile b/assets/training/model_management/environments/model-management/context/Dockerfile
@@ -22,10 +22,14 @@ COPY requirements.txt .
 # Going forward  azureml-automl-dnn-vision needs to update version for torch and numpy
 RUN conda install python=3.9 -y
 
+RUN conda remove jinja2 -y
+
+RUN conda install -c conda-forge jinja2=3.1.5 -y
+
 RUN pip install -r requirements.txt --no-cache-dir
 
 # Vulnerability fix
-RUN pip install Pillow gunicorn onnx==1.17.0 idna tqdm requests==2.32.1 tornado==6.4.2 certifi==2024.07.04 urllib3==1.26.19 scikit-learn==1.5.1 mlflow==2.19 mlflow-skinny==2.19 jinja2==3.1.5 marshmallow==3.23.2
+RUN pip install Pillow gunicorn onnx==1.17.0 idna tqdm requests==2.32.1 tornado==6.4.2 certifi==2024.07.04 urllib3==1.26.19 scikit-learn==1.5.1 mlflow==2.19 mlflow-skinny==2.19 marshmallow==3.23.2
 
 # List installed packages
 RUN pip list