Skip to content

Security releases Feb 27th #996

Closed
Closed

Description

@rvagg

Hey folks, I'll be pushing out some security releases next week, anticipated for the 27th but could potentially slip into the 28th if we run into any unexpected trouble integrating OpenSSL. Since this repo requires sign-off, I just need to make sure that there will be people available to get things merged.

Our process doc still says to run ./update.sh -s but that caused some hiccups during the November releases with additional things updated aside from just bumping versions. Will it be OK this time and just update the pieces needed or should we get the process doc updated with something different?

Activity

  1. LaurentGoderre commented on Feb 22, 2019

    @LaurentGoderre
    Member

    @rvagg I don't think we have any outstanding changes like we did last time. Also since things are going pretty smooth, I would recommend that we don't merge anything new until that security release.

    Do you have a time window (in which timezone) during those days? I should be available most of these two days.

  2. SimenB commented on Feb 22, 2019

    @SimenB
    Member

    Running ./update.sh -s currently gives a diff in chakracore/8/Dockerfile - changing it from jessie to stretch. Doesn't seem fitting for a security update. Can just ditch the diff in that file though, as I guess node chakra won't be getting an update at the same time?

    Beyond that, clean diff, so should be good

  3. chorrell commented on Feb 22, 2019

    @chorrell
    Contributor

    Yeah, agreed.

  4. SimenB commented on Feb 28, 2019

    @SimenB
    Member

    Can you put together a PR here?

  5. PeterDaveHello commented on Feb 28, 2019

    @PeterDaveHello
    Member

    Working on it

  6. rvagg commented on Feb 28, 2019

    @rvagg
    MemberAuthor

    ok then, you noticed them pretty quick! was just working on a PR but I'll leave you folks to it

  7. kibertoad commented on Feb 28, 2019

    @kibertoad

    Any timeline for when updated Docker images will be up?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions