fix(security): vulnerabilities found in quorum-multi-party-all-in-one

Fixes hyperledger-cacti#2060 Signed-off-by: aldousalvarez <[email protected]>
aldousalvarez · Dec 23, 2022 · dc1e391 · dc1e391
1 parent 6c62de4
commit dc1e391
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 4 deletions.
diff --git a/.github/containerscan/allowedlist.yaml b/.github/containerscan/allowedlist.yaml
@@ -1,6 +1,13 @@
 general:
   vulnerabilities:
     #besu-all-in-one
+    - CVE-2022-37734
+    - CVE-2022-25857
 
-    -CVE-2022-37734
-    -CVE-2022-25857
+    #quorum-multi-party-all-in-one
+    - CVE-2022-24713
+    - CVE-2021-41092
+    - CVE-2022-27664
+    - CVE-2022-32149
+    - CVE-2021-41092
+    - CVE-2022-32149
diff --git a/tools/docker/quorum-multi-party-all-in-one/Dockerfile b/tools/docker/quorum-multi-party-all-in-one/Dockerfile
@@ -3,9 +3,9 @@
 # Setup quorum-dev-quickstart
 ################################
 
-FROM node:16 AS quorum-dev-quickstart-setup
+FROM node:16.17.0 AS quorum-dev-quickstart-setup
 
-ENV QUORUM_QUICKSTART_VERSION=0.0.53
+ENV QUORUM_QUICKSTART_VERSION=0.0.80
 ENV ROOT_DIR=/opt/quorum-dev-quickstart
 
 WORKDIR "${ROOT_DIR}"