Skip to content

Commit

Permalink
fix(security): vulnerabilities found in quorum-all-in-one
Browse files Browse the repository at this point in the history
Fixes hyperledger-cacti#2059

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
  • Loading branch information
aldousalvarez committed Jan 4, 2023
1 parent 25f2f54 commit df939f5
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 6 deletions.
5 changes: 3 additions & 2 deletions .github/containerscan/allowedlist.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
general:
vulnerabilities:
#besu-all-in-one
- CVE-2022-37734
- CVE-2022-25857


-CVE-2022-37734
-CVE-2022-25857
8 changes: 4 additions & 4 deletions tools/docker/quorum-all-in-one/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ARG QUORUM_VERSION=21.4.1
ARG TESSERA_VERSION=21.1.1
ARG QUORUM_VERSION=22.7.4
ARG TESSERA_VERSION=21.1.7

FROM quorumengineering/quorum:$QUORUM_VERSION AS quorum
FROM quorumengineering/tessera:$TESSERA_VERSION AS tessera
Expand All @@ -8,10 +8,10 @@ COPY --from=quorum /usr/local/bin/geth /usr/local/bin/
COPY --from=quorum /usr/local/bin/bootnode /usr/local/bin/

# BASH
RUN apk update && apk add --no-cache bash
RUN apt update && apt-get -y --no-cache install bash

# SUPERVISORD
RUN apk update && apk add --no-cache supervisor
RUN apt update && apt-get -y --no-cache install supervisor
RUN mkdir -p /var/log/supervisor
COPY supervisord.conf /etc/supervisord.conf

Expand Down

0 comments on commit df939f5

Please sign in to comment.