https://bugzilla.redhat.com/show_bug.cgi?id=1335748
Mikolaj Izdebski <mizdebsk(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|CLOSED |NEW
Resolution|NOTABUG |---
Keywords| |Reopened
--- Comment #2 from Mikolaj Izdebski <mizdebsk(a)redhat.com> ---
Forking with slight modifications *is* bundling (just like shading, which also
modifies bundled code).
Bundled and modified code may still be subject to security vulnerabilities. For
example jenkins-xstream in rawhide is at version 1.4.7, so it could be affected
by CVE-2016-3674, which was fixed in xstream 1.4.9
--
You are receiving this mail because:
You are on the CC list for the bug.