fix: Re-add RUSTSEC-2023-0071 exclusion (#514)

* fix: Re-add RUSTSEC-2023-0071 exclusion Part of stackabletech/issues#677 Fixup of #513 operator-rs is using the rsa crate, there is no fix yet * typo * Update template/deny.toml Co-authored-by: Nick <10092581+NickLarsenNZ@users.noreply.github.com> --------- Co-authored-by: Nick <10092581+NickLarsenNZ@users.noreply.github.com>

Author: sbernauer

template/deny.toml

@@ -1,3 +1,8 @@
+# This file is the source of truth for all our repos!
+# This includes repos not templated by operator-templating, please copy/paste the file for this repos.
+
+# TIP: Use "cargo deny check" to check if everything is fine
+
 [graph]
 targets = [
  { triple = "x86_64-unknown-linux-gnu" },
@@ -9,6 +14,17 @@ targets = [
 
 [advisories]
 yanked = "deny"
+ignore = [
+ # https://rustsec.org/advisories/RUSTSEC-2023-0071
+ # "rsa" crate: Marvin Attack: potential key recovery through timing sidechannel
+ #
+ # No patch is yet available, however work is underway to migrate to a fully constant-time implementation
+ # So we need to accept this, as of SDP 25.3 we are not using the rsa crate to create certificates used in production
+ # setups.
+ #
+ # https://github.com/RustCrypto/RSA/issues/19 is the tracking issue
+ "RUSTSEC-2023-0071",
+]
 
 [bans]
 multiple-versions = "allow"