upgrade linux-libc-dev to fix CVEs (#13076)

liu-shaojun · web-flow · commit cfadf3f2f70e · 2025-04-15T11:43:53.000+08:00
diff --git a/docker/llm/serving/xpu/docker/Dockerfile b/docker/llm/serving/xpu/docker/Dockerfile
@@ -20,11 +20,12 @@ COPY ./1ccl_for_multi_arc.patch /build/
      
 RUN set -eux && \
     #
-    # Update and install basic dependencies
+    # Update and install basic dependencies, upgrade linux-libc-dev to fix CT7 CVEs
     apt-get update && \
     apt-get install -y --no-install-recommends \
       curl wget git libunwind8-dev vim less gnupg gpg-agent software-properties-common \
       libfabric-dev wrk libaio-dev numactl && \
+      linux-libc-dev && \
     # 
     # Set timezone
     ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && \

Original file line number	Diff line number	Diff line change
`@@ -20,11 +20,12 @@ COPY ./1ccl_for_multi_arc.patch /build/`
`20`	`20`
`21`	`21`	`RUN set -eux && \`
`22`	`22`	`#`
`23`		`- # Update and install basic dependencies`
	`23`	`+ # Update and install basic dependencies, upgrade linux-libc-dev to fix CT7 CVEs`
`24`	`24`	`apt-get update && \`
`25`	`25`	`apt-get install -y --no-install-recommends \`
`26`	`26`	`curl wget git libunwind8-dev vim less gnupg gpg-agent software-properties-common \`
`27`	`27`	`libfabric-dev wrk libaio-dev numactl && \`
	`28`	`+ linux-libc-dev && \`
`28`	`29`	`#`
`29`	`30`	`# Set timezone`
`30`	`31`	`ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && \`