[Security update] Update node 4, 6 and 8 #3621

SimenB · 2017-10-25T08:44:54Z

https://nodejs.org/en/blog/vulnerability/oct-2017-dos/
nodejs/docker-node#555

https://nodejs.org/en/blog/vulnerability/oct-2017-dos/

krasnoperov · 2017-10-25T13:40:03Z

What is blocking this critical PR?

tianon · 2017-10-25T13:44:41Z

Probably just the fact that it was submitted at roughly 2am and all the maintainers are asleep 😉 I'll take a look ASAP.

tianon · 2017-10-25T13:52:42Z

Diff:

diff --git a/_bashbrew-list b/_bashbrew-list
index e0394ed..5fbe217 100644
--- a/_bashbrew-list
+++ b/_bashbrew-list
@@ -10,12 +10,12 @@ node:4.8-onbuild
 node:4.8-slim
 node:4.8-stretch
 node:4.8-wheezy
-node:4.8.4
-node:4.8.4-alpine
-node:4.8.4-onbuild
-node:4.8.4-slim
-node:4.8.4-stretch
-node:4.8.4-wheezy
+node:4.8.5
+node:4.8.5-alpine
+node:4.8.5-onbuild
+node:4.8.5-slim
+node:4.8.5-stretch
+node:4.8.5-wheezy
 node:6
 node:6-alpine
 node:6-onbuild
@@ -28,30 +28,30 @@ node:6.11-onbuild
 node:6.11-slim
 node:6.11-stretch
 node:6.11-wheezy
-node:6.11.4
-node:6.11.4-alpine
-node:6.11.4-onbuild
-node:6.11.4-slim
-node:6.11.4-stretch
-node:6.11.4-wheezy
+node:6.11.5
+node:6.11.5-alpine
+node:6.11.5-onbuild
+node:6.11.5-slim
+node:6.11.5-stretch
+node:6.11.5-wheezy
 node:8
 node:8-alpine
 node:8-onbuild
 node:8-slim
 node:8-stretch
 node:8-wheezy
-node:8.7
-node:8.7-alpine
-node:8.7-onbuild
-node:8.7-slim
-node:8.7-stretch
-node:8.7-wheezy
-node:8.7.0
-node:8.7.0-alpine
-node:8.7.0-onbuild
-node:8.7.0-slim
-node:8.7.0-stretch
-node:8.7.0-wheezy
+node:8.8
+node:8.8-alpine
+node:8.8-onbuild
+node:8.8-slim
+node:8.8-stretch
+node:8.8-wheezy
+node:8.8.0
+node:8.8.0-alpine
+node:8.8.0-onbuild
+node:8.8.0-slim
+node:8.8.0-stretch
+node:8.8.0-wheezy
 node:alpine
 node:argon
 node:argon-alpine
diff --git a/node_alpine/Dockerfile b/node_alpine/Dockerfile
index 688c3d6..80a80c9 100644
--- a/node_alpine/Dockerfile
+++ b/node_alpine/Dockerfile
@@ -1,7 +1,6 @@
 FROM alpine:3.6
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 8.7.0
+ENV NODE_VERSION 8.8.0
 
 RUN addgroup -g 1000 node \
     && adduser -u 1000 -G node -s /bin/sh -D node \
@@ -19,13 +18,12 @@ RUN addgroup -g 1000 node \
         python \
   # gpg keys listed at https://github.com/nodejs/node#release-team
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -46,7 +44,7 @@ RUN addgroup -g 1000 node \
     && rm -Rf "node-v$NODE_VERSION" \
     && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt
 
-ENV YARN_VERSION 1.2.0
+ENV YARN_VERSION 1.2.1
 
 RUN apk add --no-cache --virtual .build-deps-yarn curl gnupg tar \
   && for key in \
diff --git a/node_argon-alpine/Dockerfile b/node_argon-alpine/Dockerfile
index bc8753f..3622b48 100644
--- a/node_argon-alpine/Dockerfile
+++ b/node_argon-alpine/Dockerfile
@@ -1,7 +1,6 @@
 FROM alpine:3.4
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 4.8.4
+ENV NODE_VERSION 4.8.5
 
 RUN addgroup -g 1000 node \
     && adduser -u 1000 -G node -s /bin/sh -D node \
@@ -19,13 +18,12 @@ RUN addgroup -g 1000 node \
         python \
   # gpg keys listed at https://github.com/nodejs/node#release-team
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -46,7 +44,7 @@ RUN addgroup -g 1000 node \
     && rm -Rf "node-v$NODE_VERSION" \
     && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt
 
-ENV YARN_VERSION 0.24.4
+ENV YARN_VERSION 1.2.1
 
 RUN apk add --no-cache --virtual .build-deps-yarn curl gnupg tar \
   && for key in \
diff --git a/node_argon-onbuild/Dockerfile b/node_argon-onbuild/Dockerfile
index a780782..8eb0246 100644
--- a/node_argon-onbuild/Dockerfile
+++ b/node_argon-onbuild/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:4.8.4
+FROM node:4.8.5
 
 RUN mkdir -p /usr/src/app
 WORKDIR /usr/src/app
diff --git a/node_argon-slim/Dockerfile b/node_argon-slim/Dockerfile
index 01977c2..27d9b9e 100644
--- a/node_argon-slim/Dockerfile
+++ b/node_argon-slim/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 4.8.4
+ENV NODE_VERSION 4.8.5
 
 RUN buildDeps='xz-utils' \
     && ARCH= && dpkgArch="$(dpkg --print-architecture)" \
@@ -45,7 +43,7 @@ RUN buildDeps='xz-utils' \
     && apt-get purge -y --auto-remove $buildDeps \
     && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 0.24.4
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_argon-stretch/Dockerfile b/node_argon-stretch/Dockerfile
index 96db9ab..070fa1f 100644
--- a/node_argon-stretch/Dockerfile
+++ b/node_argon-stretch/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 4.8.4
+ENV NODE_VERSION 4.8.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 0.24.4
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_argon-wheezy/Dockerfile b/node_argon-wheezy/Dockerfile
index 9660e6a..8907fe8 100644
--- a/node_argon-wheezy/Dockerfile
+++ b/node_argon-wheezy/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 4.8.4
+ENV NODE_VERSION 4.8.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -37,7 +35,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 0.24.4
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_argon/Dockerfile b/node_argon/Dockerfile
index f9cf8d3..69ae9b3 100644
--- a/node_argon/Dockerfile
+++ b/node_argon/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 4.8.4
+ENV NODE_VERSION 4.8.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 0.24.4
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_boron-alpine/Dockerfile b/node_boron-alpine/Dockerfile
index 3d2f5f8..ad5d6f1 100644
--- a/node_boron-alpine/Dockerfile
+++ b/node_boron-alpine/Dockerfile
@@ -1,7 +1,6 @@
 FROM alpine:3.4
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 6.11.4
+ENV NODE_VERSION 6.11.5
 
 RUN addgroup -g 1000 node \
     && adduser -u 1000 -G node -s /bin/sh -D node \
@@ -19,13 +18,12 @@ RUN addgroup -g 1000 node \
         python \
   # gpg keys listed at https://github.com/nodejs/node#release-team
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -46,7 +44,7 @@ RUN addgroup -g 1000 node \
     && rm -Rf "node-v$NODE_VERSION" \
     && rm "node-v$NODE_VERSION.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt
 
-ENV YARN_VERSION 1.1.0
+ENV YARN_VERSION 1.2.1
 
 RUN apk add --no-cache --virtual .build-deps-yarn curl gnupg tar \
   && for key in \
diff --git a/node_boron-onbuild/Dockerfile b/node_boron-onbuild/Dockerfile
index 2a650a2..ea4e5f5 100644
--- a/node_boron-onbuild/Dockerfile
+++ b/node_boron-onbuild/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:6.11.4
+FROM node:6.11.5
 
 RUN mkdir -p /usr/src/app
 WORKDIR /usr/src/app
diff --git a/node_boron-slim/Dockerfile b/node_boron-slim/Dockerfile
index a3f9de3..0c771e5 100644
--- a/node_boron-slim/Dockerfile
+++ b/node_boron-slim/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 6.11.4
+ENV NODE_VERSION 6.11.5
 
 RUN buildDeps='xz-utils' \
     && ARCH= && dpkgArch="$(dpkg --print-architecture)" \
@@ -45,7 +43,7 @@ RUN buildDeps='xz-utils' \
     && apt-get purge -y --auto-remove $buildDeps \
     && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.1.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_boron-stretch/Dockerfile b/node_boron-stretch/Dockerfile
index a4ada31..2670bc0 100644
--- a/node_boron-stretch/Dockerfile
+++ b/node_boron-stretch/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 6.11.4
+ENV NODE_VERSION 6.11.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.1.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_boron-wheezy/Dockerfile b/node_boron-wheezy/Dockerfile
index 8efe8c4..bde7c3d 100644
--- a/node_boron-wheezy/Dockerfile
+++ b/node_boron-wheezy/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 6.11.4
+ENV NODE_VERSION 6.11.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -37,7 +35,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.1.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_boron/Dockerfile b/node_boron/Dockerfile
index 8ff2ece..8e34897 100644
--- a/node_boron/Dockerfile
+++ b/node_boron/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 6.11.4
+ENV NODE_VERSION 6.11.5
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.1.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_latest/Dockerfile b/node_latest/Dockerfile
index 5265da0..236f034 100644
--- a/node_latest/Dockerfile
+++ b/node_latest/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 8.7.0
+ENV NODE_VERSION 8.8.0
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.2.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_onbuild/Dockerfile b/node_onbuild/Dockerfile
index a6fce44..356af6c 100644
--- a/node_onbuild/Dockerfile
+++ b/node_onbuild/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.7.0
+FROM node:8.8.0
 
 RUN mkdir -p /usr/src/app
 WORKDIR /usr/src/app
diff --git a/node_slim/Dockerfile b/node_slim/Dockerfile
index a17b4d8..9cc703f 100644
--- a/node_slim/Dockerfile
+++ b/node_slim/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 8.7.0
+ENV NODE_VERSION 8.8.0
 
 RUN buildDeps='xz-utils' \
     && ARCH= && dpkgArch="$(dpkg --print-architecture)" \
@@ -45,7 +43,7 @@ RUN buildDeps='xz-utils' \
     && apt-get purge -y --auto-remove $buildDeps \
     && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.2.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_stretch/Dockerfile b/node_stretch/Dockerfile
index f336664..198f583 100644
--- a/node_stretch/Dockerfile
+++ b/node_stretch/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 8.7.0
+ENV NODE_VERSION 8.8.0
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -40,7 +38,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.2.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \
diff --git a/node_wheezy/Dockerfile b/node_wheezy/Dockerfile
index 9f28113..5f88d49 100644
--- a/node_wheezy/Dockerfile
+++ b/node_wheezy/Dockerfile
@@ -6,13 +6,12 @@ RUN groupadd --gid 1000 node \
 # gpg keys listed at https://github.com/nodejs/node#release-team
 RUN set -ex \
   && for key in \
-    9554F04D7259F04124DE6B476D5A82AC7E37093B \
     94AE36675C464D64BAFA68DD7434390BDBE9B9C5 \
     FD3A5288F042B6850C66B31F09FE44734EB7990E \
     71DCFD284A79C3B38668286BC97EC7A07EDE3FC1 \
     DD8F2338BAE7501E3DD5AC78C273792F7D83545D \
-    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     C4F0DFFF4E8C1A8236409D08E73BC641CC11F4C8 \
+    B9AE9905FFD7803F25714661B63B535A4C206CA9 \
     56730D5401028683275BD23C23EFEFE93C4CFFFE \
   ; do \
     gpg --keyserver pgp.mit.edu --recv-keys "$key" || \
@@ -20,8 +19,7 @@ RUN set -ex \
     gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$key" ; \
   done
 
-ENV NPM_CONFIG_LOGLEVEL info
-ENV NODE_VERSION 8.7.0
+ENV NODE_VERSION 8.8.0
 
 RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && case "${dpkgArch##*-}" in \
@@ -37,7 +35,7 @@ RUN ARCH= && dpkgArch="$(dpkg --print-architecture)" \
   && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt \
   && ln -s /usr/local/bin/node /usr/local/bin/nodejs
 
-ENV YARN_VERSION 1.2.0
+ENV YARN_VERSION 1.2.1
 
 RUN set -ex \
   && for key in \

tianon · 2017-10-25T14:23:12Z

LGTM

Build test of #3621; 430e237 (node):

$ bashbrew build node:8.8.0
Building bashbrew/cache:096589678d58c90b5206d898ca13a289ace8830c9744be87514c6d651bba5ae3 (node:8.8.0)
Tagging node:8.8.0
Tagging node:8.8
Tagging node:8
Tagging node:latest

$ test/run.sh node:8.8.0
testing node:8.8.0
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:8.8.0-alpine
Building bashbrew/cache:bdc997d61d3d317d1793911151b449cbbfb6ad10f9d0706e01b6175ca9324a29 (node:8.8.0-alpine)
Tagging node:8.8.0-alpine
Tagging node:8.8-alpine
Tagging node:8-alpine
Tagging node:alpine

$ test/run.sh node:8.8.0-alpine
testing node:8.8.0-alpine
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:8.8.0-onbuild
Building bashbrew/cache:11ff696f1a0b14f87cc9f2718100e538533219501fb520e5b6a9ebbf4d996ba0 (node:8.8.0-onbuild)
Tagging node:8.8.0-onbuild
Tagging node:8.8-onbuild
Tagging node:8-onbuild
Tagging node:onbuild

$ test/run.sh node:8.8.0-onbuild
testing node:8.8.0-onbuild
	'override-cmd' [1/1]...passed


$ bashbrew build node:8.8.0-slim
Building bashbrew/cache:25e3f825e9a94e2027a7cbf42b7b217cad44a4aac29bc802b14b7930698a1bdd (node:8.8.0-slim)
Tagging node:8.8.0-slim
Tagging node:8.8-slim
Tagging node:8-slim
Tagging node:slim

$ test/run.sh node:8.8.0-slim
testing node:8.8.0-slim
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:8.8.0-stretch
Building bashbrew/cache:ac704bd7ce34b191ae2498715c094f3900b4586e85154f3ae8eef319157541f6 (node:8.8.0-stretch)
Tagging node:8.8.0-stretch
Tagging node:8.8-stretch
Tagging node:8-stretch
Tagging node:stretch

$ test/run.sh node:8.8.0-stretch
testing node:8.8.0-stretch
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:8.8.0-wheezy
Building bashbrew/cache:b0de5a6e94e574feae2480f381e614d6a51d6a6451e991e3c83865c81ef0ab16 (node:8.8.0-wheezy)
Tagging node:8.8.0-wheezy
Tagging node:8.8-wheezy
Tagging node:8-wheezy
Tagging node:wheezy

$ test/run.sh node:8.8.0-wheezy
testing node:8.8.0-wheezy
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:6.11.5
Building bashbrew/cache:af074d6a389d017eab8861a5e463068ceeabe69d1ffe8635c0c6b83eabca1c64 (node:6.11.5)
Tagging node:6.11.5
Tagging node:6.11
Tagging node:6
Tagging node:boron

$ test/run.sh node:6.11.5
testing node:6.11.5
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:6.11.5-alpine
Building bashbrew/cache:5c0868c7b08a1bd5c34a5aebfe43b803139c65d40002d3b6213d85279d4fba23 (node:6.11.5-alpine)
Tagging node:6.11.5-alpine
Tagging node:6.11-alpine
Tagging node:6-alpine
Tagging node:boron-alpine

$ test/run.sh node:6.11.5-alpine
testing node:6.11.5-alpine
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:6.11.5-onbuild
Building bashbrew/cache:2d906d81e0a13aceb60a0a8018ab90c317fe468003ec3e594098f6fbbf4ea515 (node:6.11.5-onbuild)
Tagging node:6.11.5-onbuild
Tagging node:6.11-onbuild
Tagging node:6-onbuild
Tagging node:boron-onbuild

$ test/run.sh node:6.11.5-onbuild
testing node:6.11.5-onbuild
	'override-cmd' [1/1]...passed


$ bashbrew build node:6.11.5-slim
Building bashbrew/cache:7ab0880e64b64a7907d8c37c045e6db3e50124646c9bd7b1a4705bb572e7c116 (node:6.11.5-slim)
Tagging node:6.11.5-slim
Tagging node:6.11-slim
Tagging node:6-slim
Tagging node:boron-slim

$ test/run.sh node:6.11.5-slim
testing node:6.11.5-slim
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:6.11.5-stretch
Building bashbrew/cache:96be7aaa3df447fa6533a8d0410f0c93f797f0cc9e3dda858af626618a62c5b1 (node:6.11.5-stretch)
Tagging node:6.11.5-stretch
Tagging node:6.11-stretch
Tagging node:6-stretch
Tagging node:boron-stretch

$ test/run.sh node:6.11.5-stretch
testing node:6.11.5-stretch
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:6.11.5-wheezy
Building bashbrew/cache:ec918cee134daf6f22d1f5c5f265e0654cd879860d14cec9ad24fb3826469827 (node:6.11.5-wheezy)
Tagging node:6.11.5-wheezy
Tagging node:6.11-wheezy
Tagging node:6-wheezy
Tagging node:boron-wheezy

$ test/run.sh node:6.11.5-wheezy
testing node:6.11.5-wheezy
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:4.8.5
Building bashbrew/cache:cc91dfe5ba1f62247fa18c16bf5833af7a2868f4f1ab62ebb64d49709794f2fb (node:4.8.5)
Tagging node:4.8.5
Tagging node:4.8
Tagging node:4
Tagging node:argon

$ test/run.sh node:4.8.5
testing node:4.8.5
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:4.8.5-alpine
Building bashbrew/cache:50255664bd3e18fe7178c5b9add42b01e5be728262fcba363757176b6d859478 (node:4.8.5-alpine)
Tagging node:4.8.5-alpine
Tagging node:4.8-alpine
Tagging node:4-alpine
Tagging node:argon-alpine

$ test/run.sh node:4.8.5-alpine
testing node:4.8.5-alpine
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:4.8.5-onbuild
Building bashbrew/cache:0ee5febb0e6472ad07b50db8371d36348b216368e35e6b7fc633f492f0f8e288 (node:4.8.5-onbuild)
Tagging node:4.8.5-onbuild
Tagging node:4.8-onbuild
Tagging node:4-onbuild
Tagging node:argon-onbuild

$ test/run.sh node:4.8.5-onbuild
testing node:4.8.5-onbuild
	'override-cmd' [1/1]...passed


$ bashbrew build node:4.8.5-slim
Building bashbrew/cache:e19792361cad44b8bd4f75cff02e6ff4949baab9e2498caad62dc47b4aa00ada (node:4.8.5-slim)
Tagging node:4.8.5-slim
Tagging node:4.8-slim
Tagging node:4-slim
Tagging node:argon-slim

$ test/run.sh node:4.8.5-slim
testing node:4.8.5-slim
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:4.8.5-stretch
Building bashbrew/cache:db9fbdf4bbc3195e3cfb32f6718d40d270c9cfd2c8b5431a74402c4a33124d2f (node:4.8.5-stretch)
Tagging node:4.8.5-stretch
Tagging node:4.8-stretch
Tagging node:4-stretch
Tagging node:argon-stretch

$ test/run.sh node:4.8.5-stretch
testing node:4.8.5-stretch
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed


$ bashbrew build node:4.8.5-wheezy
Building bashbrew/cache:e4335f24b544a9b2e582c06795ad1fc78cc030b0faa6aab4d41fd3f23428f78a (node:4.8.5-wheezy)
Tagging node:4.8.5-wheezy
Tagging node:4.8-wheezy
Tagging node:4-wheezy
Tagging node:argon-wheezy

$ test/run.sh node:4.8.5-wheezy
testing node:4.8.5-wheezy
	'utc' [1/5]...passed
	'cve-2014--shellshock' [2/5]...passed
	'no-hard-coded-passwords' [3/5]...passed
	'override-cmd' [4/5]...passed
	'node-hello-world' [5/5]...passed

[Security update] Update node 4, 6 and 8

430e237

https://nodejs.org/en/blog/vulnerability/oct-2017-dos/

SimenB mentioned this pull request Oct 25, 2017

Upgrade to node 4.8.5, 6.11.5, and 8.8.0 with yarn 1.2.1 to fix a DOS security vulnerability nodejs/docker-node#555

Merged

docker-library-bot added the library/node label Oct 25, 2017

This was referenced Oct 25, 2017

When will 8.8-alpine be on Dockercloud nodejs/docker-node#556

Closed

New 4.x, 6.x, and 8.x images needed to patch DOS vulnerability nodejs/docker-node#554

Closed

tianon merged commit e4a8374 into docker-library:master Oct 25, 2017

SimenB deleted the patch-3 branch October 25, 2017 17:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Security update] Update node 4, 6 and 8 #3621

[Security update] Update node 4, 6 and 8 #3621

SimenB commented Oct 25, 2017

krasnoperov commented Oct 25, 2017

tianon commented Oct 25, 2017 via email

tianon commented Oct 25, 2017

tianon commented Oct 25, 2017

[Security update] Update node 4, 6 and 8 #3621

[Security update] Update node 4, 6 and 8 #3621

Conversation

SimenB commented Oct 25, 2017

krasnoperov commented Oct 25, 2017

tianon commented Oct 25, 2017 via email

tianon commented Oct 25, 2017

tianon commented Oct 25, 2017