diff --git a/CHANGELOG.md b/CHANGELOG.md
index c85db82..5683b50 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,11 @@
 ## [Unreleased]
 
 
+## [1.4.2] -- 2019-05-14
+### Fixed
+- Patch for CVE-2019-5021 in `Dockerfile`. `node:8.16.0-alpine` uses a patched version of `alpine`.
+
+
 ## [1.4.1] -- 2018-02-26
 ### Fixed
 - DB connection is now encrypted
@@ -13,6 +18,8 @@
 - Notifications are no longer sent to a signed out device
   * ENV VAR `PUSH_NOTIFICATIONS_APN_KEY_PATH` (for iOS)
 - Prepush githook for `yarn lint` and `yarn test` with `npm:husky`
+- Environment variable `PUSH_NOTIFICATIONS_APN_KEY_PATH`
+- https://jira.amida.com/browse/ORANGE-1029, including paranoid delete on Devices table.
 
 ### Changed
 - Use sequelize up/down migrations instead of `db.sync()`
diff --git a/Dockerfile b/Dockerfile
index 9f3de54..e739f63 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:8.14.0-alpine as builder
+FROM node:8.16.0-alpine as builder
 
 WORKDIR /app/
 COPY . /app/
@@ -7,7 +7,7 @@ RUN yarn install --pure-lockfile
 RUN yarn build
 RUN yarn install --production --frozen-lockfile
 
-FROM node:8.14.0-alpine
+FROM node:8.16.0-alpine
 
 WORKDIR /app/
 
diff --git a/package.json b/package.json
index 277cd76..2291442 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "amida-notification-microservice",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Microservice for a lightweight notification application",
   "author": "Nick Mcally <nick@amida.com>",
   "main": "dist/index.js",