Comment by joatmon-snoo

Unrelated, the Nodejs patch is to strip the emudhra certs, which is its own separate security incident.