Comment 11 for bug 2030976

Just to confirm, a possible short-term mitigation in deployments who can't patch services immediately would be to simply disable notifications in configuration, correct?

Also, obviously, operators will need to purge or redact any copies of old notifications in external systems once disabled or patched.