"The OpenSSL group do not tell the LibreSSL group about vulnerabilities that they are fixing in upcoming releases."
https://marc.info/?l=openbsd-misc&m=142654095813320&w=2
[ edit: submitted as https://news.ycombinator.com/item?id=9215915 ]