It depends which license they received when they received their copy of the code. If they received it under the GPL license, they're bound by it's terms. If they received it under CDDL, they're bound by those terms. If they've received (or can receive) it under both licenses, they can choose which license they wish to be bound by.
