Post #2168595

RE: https://mastodon.social/@thomas_zahner/116452695006665182 problems with OpenSSL itself aside, I don't think it's great that as the responsible package maintainer for Fedora I have to find out about these vulnerabilities over social media - because the project only filed GitHub security advisories, but there's no RUSTSEC or CVE entries for them (yet?)