Release the alpine 3.9 images? #990

Activity

1. LaurentGoderre commented on Feb 12, 2019

   

   LaurentGoderre

   on Feb 12, 2019

   Member

   More actions

   @brejnko the alpine version gets updated when a new version of Node is released.
2. brejnko commented on Feb 12, 2019

   

   brejnko

   on Feb 12, 2019

   Author

   More actions

   @LaurentGoderre good to know that. What options do I have until then? The 3.8 Alpine has a lot of vulnerabilities like the CVE-2018-12699, CVE-2018-7643 and CVE-2019-6109.

   Should my organization start building images and we stop using the LTS images from DockerHub?
3. LaurentGoderre commented on Feb 12, 2019

   

   LaurentGoderre

   on Feb 12, 2019

   Member

   More actions

   @brejnko it's a very hard line to balance staying up-to-date and not breaking everyone's build. When you say your are using LTS, do you mean Node 8?
4. brejnko commented on Feb 12, 2019

   

   brejnko

   on Feb 12, 2019

   Last edited by brejnko

   Author

   More actions

   @LaurentGoderre yes, we use 8.9 and 10.15 mostly. I see now that the tag lts-alpine is actually 10.15.1 Node which is labeled Stable but not LTS. Is this how it should be?

   edit: Oh, ok, got it, 10.x is the Active LTS branch, and 10.15 is the Stable one.
5. brejnko

   closed this as completedon Feb 12, 2019
6. IdanAdar commented on Feb 27, 2019

   

   IdanAdar

   on Feb 27, 2019

   More actions

   Do we know when 8.16 is expected so that the node-8:alpine image will get updated as well to alpine 3.9?