Patch HF PT Training latest(2.1) for packages expat, libarchive13, apparmor, gevent (#4357)

* patch libarchive13 for HF PT Inference neuronx

* Patch libarchive13 in HF PT 1.13 neuronx

* Patch libarchive13 in HF PT 2.1 training neuronx

* Patch critical vulnerabilites in HF PT 1.13 GPU Training image

* Patch HF PT Training latest for packages expat,libarchive13,apparmor

* fix: pin huggingface_hub, gevent

* fix typo

* revert dlc_dev_congig.toml changes before merge

* fix typo

---------

Co-authored-by: malavhs <[email protected]>

Author: malav-shastri

huggingface/pytorch/training/docker/2.1/py3/cu121/Dockerfile.gpu

@@ -19,6 +19,8 @@ ARG FLASH_ATTN_VERSION=2.3.6
 ARG MULTIPROCESS_VERSION=0.70.16
 ARG DILL_VERSION=0.3.8
 ARG NINJA_VERSION=1.11.1
+ARG HUGGINGFACE_HUB_VERSION=0.25.2
+ARG GEVENT_VERSION=24.10.1
 ARG PYTHON=python3
 
 # TODO: Remove when the base image is updated
@@ -42,11 +44,13 @@ RUN pip install --no-cache-dir \
 	flash-attn==${FLASH_ATTN_VERSION} \
 	multiprocess==${MULTIPROCESS_VERSION} \
 	dill==${DILL_VERSION} \
-    ninja==${NINJA_VERSION}
+    ninja==${NINJA_VERSION} \
+	huggingface_hub==${HUGGINGFACE_HUB_VERSION} \
+	gevent==${GEVENT_VERSION}
 
 RUN apt-get update \
  # TODO: Remove upgrade statements once packages are updated in base image
- && apt-get -y upgrade --only-upgrade systemd openssl cryptsetup libkrb5-3 \
+ && apt-get -y upgrade --only-upgrade systemd openssl cryptsetup libkrb5-3 expat libarchive13 apparmor \
  && apt install -y git git-lfs \
  && apt-get clean \
  && rm -rf /var/lib/apt/lists/*