as an explanation for the misnumbered redhat version.
the disclosure itself followed a normal timeline, which you can view at the bottom of their blog post.