This bug literally had a global impact. The principle at stake is whether enough control
mechanisms exist at present to eliminate future problems. It is well worth considering.
Individuals compiling OpenSSL and other FOSS cryptographic packages may choose not to run
tests that requires days of processing, but distributions that make modifications are
obligated to do so in my opinion.