fix(security): vulnerabilities found in besu-all-in-one #2055

Signed-off-by: charelle <charelle.wrk@gmail.com>
hyperledger · Nov 2, 2022 · 2ce098f · 2ce098f
1 parent 3062343
commit 2ce098f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
@@ -0,0 +1,6 @@
+general:
+  vulnerabilities:
+    #besu-all-in-one
+
+    -CVE-2022-37734
+    -CVE-2022-25857
diff --git a/tools/docker/besu-all-in-one/Dockerfile b/tools/docker/besu-all-in-one/Dockerfile
@@ -1,8 +1,8 @@
-ARG BESU_VERSION=1.5.1
-ARG ORION_VERSION=1.6
+ARG BESU_VERSION=22.7.4
+ARG TESSERA_VERSION=22.1.7
 
 FROM hyperledger/besu:$BESU_VERSION AS besu
-FROM pegasyseng/orion:1.5.1 AS orion
+FROM quorumengineering/tessera:$TESSERA_VERSION AS tessera
 
 COPY --from=besu /opt/besu/ /opt/besu/