[jancsika]

Thanks, I didn't realize that.

Do you know if these exceptions are documented somewhere deep in the Debian doc maze?

[jwilk]

It's kinda documented in release notes:

https://www.debian.org/releases/stretch/amd64/release-notes/...

They don't mention the Oracle debacle, though.

[voltagex_]

>Unfortunately, this means that libv8-3.14, nodejs, and the associated node-* package ecosystem should not currently be used with untrusted content, such as unsanitized data from the Internet.

Jeez. I guess this means most people will be using other node binaries in production.

[vbernat]

If they are, I don't know where.