remove package vulns

Signed-off-by: Srikanth Ramakrishna <srikanth.ramakrishna@intel.com>

Author: sramakintel

pytorch/Dockerfile

@@ -320,6 +320,8 @@ ARG GID=109
 RUN groupadd -g ${GID} render &&\
     usermod -aG video,render model-server
 
+RUN python -m pip install pip==23.3 setuptools==70.0.0
+
 USER model-server
 
 WORKDIR /home/model-server

pytorch/docker-compose.yaml

@@ -183,6 +183,8 @@ services:
         dependency.apt.openjdk-17-jdk: true
         dependency.apt.xpu-smi: ${XPU_SMI_VERSION:-1.2.38}
         dependency.idp: false
+        dependency.pip.pip: 23.3
+        dependency.pip.setuptools: 70.0.0
         dependency.python.pip: serving/torchserve-xpu-requirements.txt
         docs: serving
         org.opencontainers.base.name: "intel/python:3.10-core"

pytorch/serving/torchserve-xpu-requirements.txt

@@ -3,7 +3,7 @@ torchvision==0.18.1+cxx11.abi
 torchaudio==2.3.1+cxx11.abi
 intel_extension_for_pytorch==2.3.110+xpu
 --extra-index-url https://pytorch-extension.intel.com/release-whl/stable/xpu/us
-numpy==1.26.4
+numpy==2.1.1
 captum>=0.7.0
 cython>=3.0.10
 pynvml>=11.5.0
@@ -12,3 +12,5 @@ pyyaml>=6.0.1
 torch-model-archiver==0.11.1
 torch-workflow-archiver==0.2.14
 torchserve==0.11.1
+pip==23.3
+setuptools==70.0.0