Bug #7357: Is there an ETA for 3.5.3?
- 2 months 2 weeks ago
First off, thank you for the work you all put into maintaining Alpine. It is appreciated.
I was wondering when the 3.5.x branch might see its next release? A few CVEs had their fix merged 3 months ago (http://bugs.alpinelinux.org/issues/7357), but haven't yet seen release. I understand there is in general no firm release cadence; just am wondering if there is an estimate available on when might be released.
Our use case: our Docker application is based on mhart/alpine-node:7, which is based on alpine:3.5 (If you're curious, the official node:alpine-7 is on alpine:3.4, so is even older). Neither of which are likely maintained, as Node.js 7.x is not maintained. Images based on mhart/alpine-node:7 that are scanned with a security tool like Twistlock report a few of the vulnerabilities that were addressed in the above-linked bug.
Thanks in advance!