From e5c678012e61314569c0a3965e974cf60468238e Mon Sep 17 00:00:00 2001
From: Steve Grubb <ausearch.1@gmail.com>
Date: Wed, 4 Sep 2024 11:00:42 -0400
Subject: [PATCH] Start by updating the image

A review showed that nowhere in the Dockerfile.ubi do we do a
microdnf -y update to pickup any known CVE and bugfixes. This patch
adds this to the build process.
---
 Dockerfile.ubi | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile.ubi b/Dockerfile.ubi
index 230966ffc74a..b8382693f095 100644
--- a/Dockerfile.ubi
+++ b/Dockerfile.ubi
@@ -8,7 +8,8 @@ ARG TORCH_CUDA_ARCH_LIST="7.0 7.5 8.0 8.6 8.9 9.0+PTX"
 FROM registry.access.redhat.com/ubi9/ubi-minimal:${BASE_UBI_IMAGE_TAG} as base
 ARG PYTHON_VERSION
 
-RUN microdnf install -y \
+RUN microdnf -y update && \
+    microdnf install -y \
     python${PYTHON_VERSION}-pip python${PYTHON_VERSION}-wheel \
     && microdnf clean all