hyperledger / hyperledger/fabric

Please help to resolve vulnerabilities in fabric images

Open
#3,465 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
16.7k
Forks
9.1k
Avg merge
5h 38m
Merged PRs (30d)
26

Description

Hi,

we are using Hyperledger fabric blockchain in one of our projects and our company's security team scanned the fabric images and reported below vulnerabilities. Below are the listed versions and vulnerabilities. Kindly provide us the clean images that doesn't have any vulnerabilities

----
fabric-orderer (v 2.4)
alpine-3.14.3
CVE-2018-25032
CVE-2022-0778
ALPINE-13661
CVE-2022-28391
CVE-2022-0778
CVE-2022-28327
CVE-2022-24675
CVE-2022-23772
CVE-2022-23773
CVE-2022-24921
CVE-2022-23806

fabric-ca (v- 1.5.3)
alpine-3.14.6
CVE-2020-29652
CVE-2022-24675
CVE-2022-28327

fabric-peer (v 2.4)
alpine-3.14.3
CVE-2018-25032
CVE-2022-0778
CVE-2022-0778
ALPINE-13661
CVE-2022-28391
CVE-2021-21334
CVE-2022-28327
CVE-2022-24675
CVE-2022-23772
CVE-2022-23773
CVE-2022-24921
CVE-2022-23806

CouchDB (v 3.1)
debian-buster
CVE-2022-1664
CVE-2022-29155
CVE-2022-1292

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.