SoftwareCollections Bugs

I feel bad for creating a new discussion for this, however, I can't find a concrete answer to this. Where are the bugs reported for a SoftwareCollections package when installed from

? The website, softwarecollections.org, has no mention about this. It does mention copr, though, the packages are not hosted/listed there. Bugzilla has some bugs about packages that are not "official" Components, which I had assumed to mean that they don't belong there either.

That's the overall question. The specific question, and the reason why I started looking to begin with, was that the

package provides configuration files that allow SSLv3, making any system that installs that package vulnerable to POODLE by default.

Instead of

or even something more refined like

• Disabling SSLv3 on the client and server
• Resolution for POODLE vulnerability