Security updates, September 2016

[chorrell]

This is a tracking ticket for the upcoming security updates.

See:

• https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/

Expected version numbers:

• Node.js v6.7.0 (Current)
• Node.js v4.6.0 (LTS "Argon")
• Node.js v0.12.16 (Maintenance)
• Node.js v0.10.47 (Maintenance)

Relevant Node.js PRs:

• Upgrade to openssl-1.0.1u for v0.10 node#8722
• Upgrade to openssl-1.0.1u for v0.12 node#8718
• Upgrade to openssl-1.0.2i v4.x node#8719
• Openssl 1.0.2i v6.x node#8720

[chorrell]

This might complicate things…

https://www.openssl.org/news/secadv/20160926.txt

[Starefossen]

[chorrell]

Ha, yep.

[chorrell]

Pull request for the Docker Hub: docker-library/official-images#2198