Bug 2443016 (CVE-FalsePositive-Unshipped)

Summary: Tracker bug for false positive CVE bugs filed for unshipped code
Product: [Fedora] Fedora Reporter: Michel Lind <michel>
Component: distributionAssignee: Michel Lind <michel>
Status: ASSIGNED --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: kevin
Target Milestone: ---Keywords: FutureFeature, Tracking, Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2381749, 2381757, 2389816, 2389817, 2389834, 2389835, 2394858, 2394867, 2395135, 2395140, 2399832, 2400141, 2400146, 2418496, 2418504, 2418510, 2418519, 2418521, 2418525, 2421509, 2421512, 2421514, 2422467, 2422479, 2422494, 2422986, 2422987, 2422988, 2426469, 2426481, 2426506, 2427794, 2427806, 2427817, 2428751, 2428753, 2428756, 2428786, 2428788, 2428791, 2432939, 2432941, 2432954, 2432963, 2433001, 2433011, 2435948, 2437339, 2437341, 2437350, 2437352, 2437357, 2437359, 2437368, 2437370, 2437379, 2437381, 2437390, 2437392, 2439008, 2439010, 2439015, 2439016, 2439022, 2439023, 2439367, 2439368, 2439377, 2439378, 2439395, 2439396, 2439545, 2439546, 2439554, 2439555, 2439569, 2439570, 2444259, 2444260, 2444261, 2444263, 2444272, 2444274, 2444275, 2444277, 2445362, 2445363, 2445370, 2445371, 2446354, 2446356, 2446357, 2446358, 2446367, 2446375, 2447157, 2447159, 2447167, 2447169, 2447171, 2447176, 2452252, 2452255, 2452256, 2452262, 2452297    
Bug Blocks: 2173769    

Description Michel Lind 2026-02-26 14:54:37 UTC 
Instructions:

Mark your bug as blocking this tracker and then close the individual bug as CLOSED - NOTABUG.

Michel Lind is working on a tool to automate filing such bugs.

Example:

- website code containing NodeJS files; said files are not in any binary artifact or used in the build process



Reproducible: Always