More like "Red Hat assigned a CVE to a security issue reported 17 months ago": https://bugzilla.redhat.com/show_bug.cgi?id=1708775 https://bugzilla.redhat.com/

More like "Red Hat assigned a CVE to a security issue reported 17 months ago": https://bugzilla.redhat.com/show_bug.cgi?id=1708775 https://bugzilla.redhat.com/show_bug.cgi?id=1708775 I don't see what the big news here is, it's merely identifying a vulnerability with a proper CVE ID, end of story. The issue itself does not even have a serious security impact so it will likely never be fixed in RHEL.