Comment by viraptor

CVE is an index of vulnerabilities. Whether there's a patch and who made it is largely irrelevant in that context.