4 ms·

Thanks, I didn't realize that. Do you know if these exceptions are documented somewhere deep in the Debian doc maze?

• vbernat 9y ago
  If they are, I don't know where.
• jwilk 9y ago
  It's kinda documented in release notes: https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#limited-security-support https://www.debian.org/releases/stretch/amd64/release-notes/... They don't mention the Oracle debacle, though.
  • voltagex_ 9y ago
    >Unfortunately, this means that libv8-3.14, nodejs, and the associated node-* package ecosystem should not currently be used with untrusted content, such as unsanitized data from the Internet. Jeez. I guess this means most people will be using other node binaries in production.