[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <atvhx9YVATRX3RhJ@mertle>
Date: Fri, 23 Oct 2026 18:37:59 -0400
From: Michael Orlitzky <michael@...itzky.com>
To: oss-security@...ts.openwall.com
Subject: Re: Upcoming Node.js security release 2026/10/21
On 2026-10-23 15:12:16, Jan Schaumann wrote:
>
> This trickles down into any consumer
Only those dumb enough to bundle or statically link their
dependencies. The bare minimum in terms of software engineering would
prevent these 1990-ass vulnerabilities.
(NodeJS has a --shared-brotli option, so NodeJS should not be an issue
for distros that are paying attention.)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
