Received: from mx1.mailbun.net (unknown [170.39.20.100]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id D8B0178022C for <~alpine/devel@lists.alpinelinux.org>; Thu, 29 Apr 2021 12:35:08 +0000 (UTC) Received: from 192.168.8.162 (unknown [107.125.25.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: ariadne@dereferenced.org) by mx1.mailbun.net (Postfix) with ESMTPSA id 4E660145A1D; Thu, 29 Apr 2021 12:35:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=dereferenced.org; s=mailbun; t=1619699706; bh=y2MH3+/PV0PsDUh7vsIKQJe8XOeH2pVe8hE5ZGjkPDE=; h=Date:From:To:cc:Subject:In-Reply-To:References; b=PuO/UDLnyPjyEqUzT137xJ5BVcDB4pDpdpEmWWIHk6BMaBMYb0g6bO/cGupYAxHCd 4mIgnafZivkxUMIChRv8EmpVRtZdLvYy7I3v5OxkX8feGAFyrTB1blevv114F6ljJI 7EnDIK8sF5DBooATz3vpoaWUeqTC8KJ2S6YTo7U7UdDPqvvcsZ5pwuY+EWwfYPRcwA f7NwSaE733ql57OaudlPCCaNWHxtH3a/Z1y5Ou456Bh9k5kjSrHdsG8VM2viZTPpxa rA4AvF97TwdFIysP3ApfJwgNJyfwFESUq3FPYLRUYtd4qqx4Dls/C48faBieaWa4+V WF5EDbH4+ABVQ== Date: Thu, 29 Apr 2021 06:35:06 -0600 (MDT) From: Ariadne Conill To: Nir Ben-Eliezer cc: Ted Trask , "~alpine/devel@lists.alpinelinux.org" <~alpine/devel@lists.alpinelinux.org> Subject: RE: Security dispute over nodejs vulnerability in Alpine - Help! In-Reply-To: Message-ID: <106081cf-be45-d0ea-7964-b910be85ad49@dereferenced.org> References: <755786165.1114022.1619696808923@mail.yahoo.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="0-271361897-1619699707=:15938" This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --0-271361897-1619699707=:15938 Content-Type: text/plain; charset="utf-8"; format="flowed" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCk9uIFRodSwgMjkgQXByIDIwMjEsIE5pciBCZW4tRWxpZXplciB3cm90ZToNCg0K PiBIaSBUZWQsIHRoYW5rIHlvdSBmb3IgeW91ciBxdWljayByZXNwb25zZS4NCj4NCj4gSXQncyBh IGdvb2QgcXVlc3Rpb24uIEkgZG8gbm90IGtub3cgaG93IG15IGN1c3RvbWVyIGRvZXMgaXQgYmVj YXVzZSBJIGhhdmUgbm8gYWNjZXNzIHRvIHRoZWlyIGVudmlyb25tZW50LiBJIGtub3cgdGhhdCBt eSBjdXN0b21lciB1cGdyYWRlZCBmcm9tIEFscGluZSAzLjExIHRvIDMuMTMsIGJ1dCBJIGRvbid0 IGtub3cgaG93IHRoZWlyIGRldmVsb3BlcnMgZGlkIGl0LiBBbGwgSSBrbm93IGlzIHRoYXQgYXQg dGhlIGJvdHRvbSBsaW5lLCB0aGV5IGFyZSB1c2luZyBub2RlanMgMTIuMjAuMSBvbiBhbiBBbHBp bmUgMy4xMyBtYWNoaW5lLg0KPg0KPiBCdXQgYXMgYW4gZXhhbXBsZSwgSSBqdXN0IGRpZCBpdCBt eXNlbGYgdGhlIGZvbGxvd2luZyB3YXk6DQo+IDEuIFB1bGxlZCBhbHBpbmU6My4xMyBmcm9tIERv Y2tlciBIdWIuDQo+IDIuIFJhbiB0aGUgY29udGFpbmVyIHdpdGggYW4gaW50ZXJhY3RpdmUgc2hl bGwuDQo+IDMuIEFkZGVkIHRoZSBub2RlanMgdjEyLjIwLjEgYXBrLg0KPg0KPiBQbGVhc2Ugc2Vl IGJlbG93IG15IGNvcHktcGFzdGUgc2hvd2luZyB0aGUgY29tbWFuZHMgSSB1c2VkIGFuZCB0aGUg b3V0cHV0Lg0KPg0KPiBBbHNvLCBJJ2QgYXBwcmVjaWF0ZSBpdCBpZiB5b3UgY291bGQgcmVsYXRl IHRvIG15IHByZXZpb3VzIHF1ZXN0aW9uOg0KPg0KPiBXaGF0IEnigJltIGFza2luZyB1bHRpbWF0 ZWx5LCBpcyB0aGlzOiBJZiB0aGUgbm9kZSBjb21tdW5pdHkgaW5kaWNhdGVkIGEgY2VydGFpbiBD VkUgaXMgZml4ZWQgaW4gdmVyc2lvbiBYLCB3aHkgd291bGQgQWxwaW5lIGluZGljYXRlIGEgZGlm ZmVyZW50IHZlcnNpb24/IElzIGl0IG1lcmVseSBhbiBpc3N1ZSBvZiB0ZXN0aW5nLCBhbmQgdGhl IGZhY3QgdGhhdCB2ZXJzaW9uIFggd2FzIG5vdCBjZXJ0aWZpZWQgdG8gYmUgdXNlZCB3aXRoIGEg Y2VydGFpbiBicmFuY2ggb2YgQWxwaW5lLCBvciBpcyB0aGVyZSBhIGRpZmZlcmVudCByZWFzb24/ DQo+DQo+IEkgYW0gdHJ5aW5nIHRvIGZpbmQgb3V0IHdoYXQgdGhlIGJvdHRvbSBsaW5lIGlzLCBh bmQgd2hldGhlciB0aGUgb2xkZXIgbm9kZWpzIHZlcnNpb24gSSBpbnN0YWxsZWQgdGhyb3VnaCBB UEssIGlzIHZ1bG5lcmFibGUgb3Igbm90Lg0KPg0KPiBUaGFuayB5b3UsDQo+IE5pcg0KPg0KPiAv ICMgYXBrIGFkZCAtLXJlcG9zaXRvcnkgaHR0cDovL2RsLWNkbi5hbHBpbmVsaW51eC5vcmcvYWxw aW5lL3YzLjExL21haW4gLS1uby1jYWNoZSBub2RlanM9MTIuMjIuMS1yMA0KDQpIZXJlIHlvdSBh ZGQgdGhlIG5vZGVqcyBmcm9tIEFscGluZSAzLjExLiAgTm9kZSAxMi4xMi4xIHdhcyBuZXZlciAN CnB1Ymxpc2hlZCBpbiBBbHBpbmUgMy4xMy4gIFRodXNseSwgdGhlIHNlY3VyaXR5IGRhdGEgZm9y IHlvdXIgY29udGFpbmVyIGlzIA0KaW5jb21wbGV0ZSwgYXMgeW91IGhhdmUgaW50cm9kdWNlZCBw YWNrYWdlcyBmcm9tIGEgZGlmZmVyZW50IHZlcnNpb24gb2YgDQpBbHBpbmUuICBZb3Ugd2lsbCBu ZWVkIHRvIGZpZ3VyZSBvdXQgaG93IHRvIGRldGVjdCB0aGF0IHlvdXJzZWxmIGluIHlvdXIgDQpz ZWN1cml0eSBzY2FubmluZyBzb2Z0d2FyZSwgSSBndWVzcy4NCg0KQnV0IG5vbmUgdGhlIGxlc3Ms IHRoYXQgdmVyc2lvbiB5b3UgYWRkZWQgaXMgbm90IHBhcnQgb2YgQWxwaW5lIDMuMTMsIGFuZCAN CnNvIHRoZSBzZWN1cml0eSBkYXRhIHRoYXQgd2UgcHVibGlzaCBmb3IgQWxwaW5lIDMuMTMgaXMg bm90IGdvaW5nIHRvIA0KZGlzY3VzcyBub2RlanMgMTIuMjIuMS1yMCBiZWNhdXNlIGl0IHdhcyBu b3QgaW4gZWRnZSBhdCB0aGUgdGltZSBBbHBpbmUgDQozLjEzIHdhcyBicmFuY2hlZCwgYW5kIGl0 IHdhcyBuZXZlciBpbiBBbHBpbmUgMy4xMyBpdHNlbGYuDQoNCklmIHlvdSBuZWVkIHNlY3VyaXR5 IGRhdGEgdGhhdCBjYW4gY292ZXIgdGhpcyBzY2VuYXJpbywgdGhlbiB5b3Ugc2hvdWxkIA0KcHJv YmFibHkgdXNlIHRoZSB1bmlvbiBpbnRlcnNlY3Rpb24gb2YgYm90aCB0aGUgQWxwaW5lIDMuMTEg YW5kIDMuMTMgDQpkYXRhYmFzZXMuICBUaGF0J3MgYWxsIEkgY2FuIHRlbGwgeW91IGFzIHRoaXMg aXMgbm90IGEgY29udGluZ2VuY3kgd2UgDQpwcm92aWRlIHN1cHBvcnQgZm9yLg0KDQpBcmlhZG5l --0-271361897-1619699707=:15938--