Commit ffc6776
doc: add suggestion for OpenSSL only sec releases
Fixes: nodejs/TSC#1187
Signed-off-by: Michael Dawson <mdawson@devrus.com>
PR-URL: #42456
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Danielle Adams <adamzdanielle@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>1 parent a9f2636 commit ffc6776
1 file changed
Lines changed: 11 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -74,6 +74,17 @@ The current security stewards are documented in the main Node.js | |||
| 74 | 74 | (Re-PR the pre-approved branch from nodejs-private/nodejs.org-private to | |
| 75 | 75 | nodejs/nodejs.org) | |
| 76 | 76 | ||
| 77 | + If the security release will only contain an OpenSSL update consider | ||
| 78 | + adding the following to the pre-release announcement: | ||
| 79 | + | ||
| 80 | + ```text | ||
| 81 | + Since this security release will only include updates for OpenSSL, if you're using | ||
| 82 | + a Node.js version which is part of a distribution which uses a system | ||
| 83 | + installed OpenSSL, this Node.js security update might not concern you. You may | ||
| 84 | + instead need to update your system OpenSSL libraries, please check the | ||
| 85 | + security announcements for the distribution. | ||
| 86 | + ``` | ||
| 87 | + | ||
| 77 | 88 | * [ ] Pre-release announcement [email][]: _**LINK TO EMAIL**_ | |
| 78 | 89 | * Subject: `Node.js security updates for all active release lines, Month Year` | |
| 79 | 90 | * Body: | |
0 commit comments