Re: Fwd: Node.js security update for all active release lines

[Michael Dawson <midawson () redhat com>]

Sorry I don't remember the context as to why we agreed to send this forward
in the first place.

As opposed to expanding any work that's a one off for the community
security stewards, since it sounds like it may not be meeting your needs,
I'd propose that we just remove it from our security release steps and you
can subscribe to the nodejs-sec mailing list like everybody else. From that
you could generate some automation to pull down the content from the
original post.

On Wed, Apr 3, 2024 at 12:55 PM Solar Designer <solar () openwall com> wrote:

> On Wed, Apr 03, 2024 at 08:12:24AM -0700, midawson wrote:
> > The planned security releases are now available. You can read more about
> > the details in -
> > https://nodejs.org/en/blog/vulnerability/april-2024-security-releases/
>
> Thank you for bringing these to oss-security.  Going forward, it'd be
> great if you post the actual detail - not only a title+link.
>
> I'm attaching to this message the Markdown content of the above blog
> post, as taken from
>
> https://github.com/nodejs/nodejs.org/blob/main/pages/en/blog/vulnerability/april-2024-security-releases.md
>
> Alexander