> So now instead of simply backporting a patch to the distibution's openssl library, every single app maintainer of each app that uses it has to do this and pro

> So now instead of simply backporting a patch to the distibution's openssl library, every single app maintainer of each app that uses it has to do this and provide an update. That’s false. OpenSSL is part of the runtime[1] and only needs to be updated there. [1]: https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/blob/master/elements/bootstrap/openssl.bst https://gitlab.com/freedesktop-sdk/freedesktop-sdk/-/blob/ma...