From Fedora Project Wiki

Bundled libraries continue to cause security issues in other packages: