Comment by radicalcentrist

I assume both? I'd be surprised to see a vulnerability fixed without first being discovered.