[scl.org] ubi8/nodejs14 update request

Jan Staněk jstanek at redhat.com
Tue May 11 10:54:48 UTC 2021


Hi Jim,

Jim Knochelmann <jim.knochelmann at ibm.com> writes:
> https://access.redhat.com/security/cve/CVE-2020-8277 which shows that
> CVE-2020-8277 has not yet been fixed.

If I'm seeing correctly, nodejs:14 is listed there as "Fixed"
via RHSA-2021:0551 [1] released on 2021-02-16.
The errata mentions an upgrade of Node to 14.15.4,
and the container contains version 14.16.1, so it looks to me as fixes
already :)

[1]: https://access.redhat.com/errata/RHSA-2021:0551
--
Jan Staněk
Software Engineer, Red Hat
jstanek at redhat.com   irc: jstanek
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/sclorg/attachments/20210511/c3a10aeb/attachment.sig>


More information about the SCLorg mailing list