CVE-2023-5752 pip installation (#188)

Installs necessary minimum version of pip upstream in the docker build

Author: faberga

docker/Dockerfile.base

@@ -46,7 +46,8 @@ RUN apt update && \
                    man                            \
                    --no-install-recommends tzdata \
                    patchelf                       \
-                   python3-pip                    \
+                   # Workaround for CVE-2023-5752 will install upstream pip as user
+                   # python3-pip                    \
                    software-properties-common     \
                    sudo                           \
                    unzip                          \

docker/Dockerfile.toolkit

@@ -26,6 +26,19 @@ RUN chown -R $UNAME:$UNAME $HOME/he-toolkit
 # Switch user to $UNAME
 USER $UNAME
 
+###################################################
+# CVE-2023-5752
+# Install upstream pip (version >=23.3.1) as user
+RUN mkdir -p $HOME/pip-install-package \
+             $HOME/.local/bin \
+             $HOME/.local/lib
+WORKDIR $HOME/pip-install-package
+RUN wget https://bootstrap.pypa.io/get-pip.py && \
+    python get-pip.py && \
+    source $HOME/.profile && \
+    pip install pip --upgrade
+###################################################
+
 # Change directories to $HOME/Intel-HE-Toolkit
 WORKDIR $HOME/he-toolkit
 

he-samples/examples/logistic-regression/datasets/requirements.txt

@@ -1,4 +1,4 @@
-pip~=22.0.0
+pip~=23.3.1
 numpy~=1.22.0
 urllib3~=1.26.6
 scikit-learn~=1.1.1