Skip to content

Commit 333da6f

Browse files
committed
Bump manylinux versions for CVEs
The `libgcc.so` is packaged for Linux wheels via `auditwheel`. However, currently the `manylinux2014` and `musllinux_1_1` images are used, where the GCC version is 9.3.0 that has CVEs. This patch bumps the images to `manylinux_2_28` and `musllinux_1_2` to have a higher version `libgcc`.
1 parent 02a1bfd commit 333da6f

File tree

5 files changed

+4
-4
lines changed

5 files changed

+4
-4
lines changed

.github/workflows/ci-build-release-wheels.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
fail-fast: false
3939
matrix:
4040
image:
41-
- {name: 'manylinux2014', py_suffix: ''}
41+
- {name: 'manylinux', py_suffix: ''}
4242
- {name: 'manylinux_musl', py_suffix: '-alpine'}
4343
python:
4444
- {version: '3.9', spec: 'cp39-cp39'}

.github/workflows/ci-pr-validation.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ jobs:
112112
fail-fast: false
113113
matrix:
114114
image:
115-
- {name: 'manylinux2014', py_suffix: ''}
115+
- {name: 'manylinux', py_suffix: ''}
116116
- {name: 'manylinux_musl', py_suffix: '-alpine'}
117117
python:
118118
- {version: '3.13', spec: 'cp313-cp313'}
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
#
1919

2020
ARG ARCH
21-
FROM quay.io/pypa/manylinux2014_${ARCH}
21+
FROM quay.io/pypa/manylinux_2_28_${ARCH}
2222

2323
ARG PYTHON_VERSION
2424
ARG PYTHON_SPEC
File renamed without changes.

pkg/manylinux_musl/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
#
1919

2020
ARG ARCH
21-
FROM quay.io/pypa/musllinux_1_1_${ARCH}
21+
FROM quay.io/pypa/musllinux_1_2_${ARCH}
2222

2323
ARG PYTHON_VERSION
2424
ARG PYTHON_SPEC

0 commit comments

Comments
 (0)