★ wanayoo — archive 1999 https://github.com/nodejs/docker-node/issues/1328Nouvelle recherche | Portail wanayoo
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dockerhub seems to be missing the latest Node security release #1328

Closed
userpixel opened this issue Sep 16, 2020 · 3 comments
Closed

Dockerhub seems to be missing the latest Node security release #1328

userpixel opened this issue Sep 16, 2020 · 3 comments

Comments

@userpixel
Copy link

@userpixel userpixel commented Sep 16, 2020

What is the expected behavior?

The latest release from this repo and Nodejs.org as of Sept 15th:

  • 12.18.4 LTS
  • 14.11.0 Current

What do you see instead?

Dockerhub is one critical security release behind:

The latest versions available on Dockerhub as of Sept 16th:

  • 12.18.3 LTS
  • 14.10.1 Current

Additional information

Those who use Node in a Dockerized environment using the official node.js images are still vulnerable to severe security issues that were fixed in yesterday's release.

@targos targos transferred this issue from nodejs/node Sep 16, 2020
@DRoet
Copy link

@DRoet DRoet commented Sep 16, 2020 •

It usually takes a while for the images to be up, #1327 already got merged but there is no PR yet towards https://github.com/docker-library/official-images, which should get opened automatically if I'm not mistaken

EDIT: PR now up at docker-library/official-images#8727

@SimenB
Copy link
Member

@SimenB SimenB commented Sep 16, 2020 •

Correct - currently restarting flaky CI builds (restarted 5 now), a PR will be up once CI is green

@SimenB
Copy link
Member

@SimenB SimenB commented Sep 16, 2020

@SimenB SimenB closed this Sep 16, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
You can’t perform that action at this time.