2 ms·

Uh? Distro maintainers knew… but there was nothing to be done about it… It was end users of the package that didn't know, had a dependency like "<=X" and with

Uh? Distro maintainers knew… but there was nothing to be done about it… It was end users of the package that didn't know, had a dependency like "<=X" and with the big change in a minor version got the rust version they could not compile (and thus run).

iudqnolq 4y ago
Nope, if you check out the original threads it's full of distro maintainers complaining they were surprised. To clarify, these are maintainers of software that depends on cryptography, not maintainers of cryptography. Those maintainers weren't reviewing dependencies on an ongoing basis.