@dalias @trademark @GossiTheDog the hashes are of advisories they claim they will publish in the future afaik, not patches.