[xml] Are CVE git tags still used?

[林自均 <johnlinp gmail com>]

Hi folks,

I am considering to apply some CVE patches from the upstream. For example, there is a patch "c1d1f712" for CVE-2016-4658 described on the Red Hat bugzilla page: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-4658

However, I don't see the CVE git tag for the commit ("c1d1f712") in the upstream git tree. I used to see those tags before the release 2.9.4 and they are really helpful.

Should I expect to see those tags again in the future? Thanks!

Best,

John Lin